index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8248d62ec402f42251e5736b33da1d4d","19e491dfe1ab656f715245ec9401bdd1","21a8a6cfa229862eedc12186f0139da0","a494e9ff391db7deac7ad21cadf45cca","bc127d20aa80e7834c97060c1ce5d7f3","ac449f0e00b004b3bba14c37f61d1e85","14eb67caa2c8c5e312e1bc8804f7135f","2802aaea098b45cf8556f7883bf5e297","0c34e053a1641c0f48f7cac16b743a82","a383055244f546ca4f7bd0290b16d9c9","986bc66f125aae71d228eeecf3efe321","97fbfaf2b454b3a9b3b4d4fd2f9a7cb9","660f72ddf06bcfa4693e29f45d3e90b0","894ce52199f7e633306149708c1b288b","bdda7ef4439954a392c9b5150a6c6213","8b6ff39df70b45bb34c816211cbc2af8","b5e9f861213e7148491ba6c13972a8ba","5254fc5d6990d2d58a9ef862503cc43d","45613d3339b9f45366218362f2e6b156","f2c6fec557daa2596b5467026f068431","7523a30c60fb7d2c02df18fa967f577d","3215b2bd3aeaea84f4f696c7ba339541","8e40018360068a2c0cb94a514b63a959","24960b3a4fb29a71445b7239cd30bbce","83432cfda6a30f376d00eba4e1e6c93f","73239203bc4cdf249575de358281fe82","d367b73118fa966b5f5432bbbf35bae5","6a834288fd96008cbe3fc39c61d21734","972748e60f696333dd8b4b12f9f3a7af","0c819835aa1289985c5292f48e7c1f24","ebd8eeac32292f508b1c960553202750")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://89.208.103.225/client14/enc2no.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn2.exe","http://85.192.40.245/fol1paf2nyg0/bn1.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://85.192.40.245/fol1paf2nyg0/bn1n.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://79.137.202.161/7yd0ymt74ny7qbuk/pangl.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.33/pctupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://89.185.85.117/bmlupdate.exe","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.246/","http://94.142.138.247/","http://94.142.138.247/","http://94.142.138.247/","http://77.91.73.11:2705/","http://78.46.248.198/","http://79.137.203.217/","http://78.46.248.198/","http://78.46.248.198/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.60/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/","http://94.142.138.74/")
