index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com" OR destinationhostname CONTAINS "telegromcn.org" OR destinationhostname CONTAINS "nch-software.info" OR destinationhostname CONTAINS "vceilinichego.ru" OR destinationhostname CONTAINS "2022-blanks.site" OR destinationhostname CONTAINS "finandy.info" OR destinationhostname CONTAINS "finandy.online" OR destinationhostname CONTAINS "flnand.online" OR destinationhostname CONTAINS "kz-smartbank.com" OR destinationhostname CONTAINS "mareux.online" OR destinationhostname CONTAINS "mmarx.quest" OR destinationhostname CONTAINS "okxsat.xyz" OR destinationhostname CONTAINS "pr-tracker.online" OR destinationhostname CONTAINS "qivvi-3.click" OR destinationhostname CONTAINS "serienjunkies.us" OR destinationhostname CONTAINS "vse-blanki.online" OR destinationhostname CONTAINS "ashgrrwt.click" OR destinationhostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com" OR sourcentdomain CONTAINS "telegromcn.org" OR sourcentdomain CONTAINS "nch-software.info" OR sourcentdomain CONTAINS "vceilinichego.ru" OR sourcentdomain CONTAINS "2022-blanks.site" OR sourcentdomain CONTAINS "finandy.info" OR sourcentdomain CONTAINS "finandy.online" OR sourcentdomain CONTAINS "flnand.online" OR sourcentdomain CONTAINS "kz-smartbank.com" OR sourcentdomain CONTAINS "mareux.online" OR sourcentdomain CONTAINS "mmarx.quest" OR sourcentdomain CONTAINS "okxsat.xyz" OR sourcentdomain CONTAINS "pr-tracker.online" OR sourcentdomain CONTAINS "qivvi-3.click" OR sourcentdomain CONTAINS "serienjunkies.us" OR sourcentdomain CONTAINS "vse-blanki.online" OR sourcentdomain CONTAINS "ashgrrwt.click" OR sourcentdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com" OR sourcehostname CONTAINS "telegromcn.org" OR sourcehostname CONTAINS "nch-software.info" OR sourcehostname CONTAINS "vceilinichego.ru" OR sourcehostname CONTAINS "2022-blanks.site" OR sourcehostname CONTAINS "finandy.info" OR sourcehostname CONTAINS "finandy.online" OR sourcehostname CONTAINS "flnand.online" OR sourcehostname CONTAINS "kz-smartbank.com" OR sourcehostname CONTAINS "mareux.online" OR sourcehostname CONTAINS "mmarx.quest" OR sourcehostname CONTAINS "okxsat.xyz" OR sourcehostname CONTAINS "pr-tracker.online" OR sourcehostname CONTAINS "qivvi-3.click" OR sourcehostname CONTAINS "serienjunkies.us" OR sourcehostname CONTAINS "vse-blanki.online" OR sourcehostname CONTAINS "ashgrrwt.click" OR sourcehostname CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com" OR destinationntdomain CONTAINS "telegromcn.org" OR destinationntdomain CONTAINS "nch-software.info" OR destinationntdomain CONTAINS "vceilinichego.ru" OR destinationntdomain CONTAINS "2022-blanks.site" OR destinationntdomain CONTAINS "finandy.info" OR destinationntdomain CONTAINS "finandy.online" OR destinationntdomain CONTAINS "flnand.online" OR destinationntdomain CONTAINS "kz-smartbank.com" OR destinationntdomain CONTAINS "mareux.online" OR destinationntdomain CONTAINS "mmarx.quest" OR destinationntdomain CONTAINS "okxsat.xyz" OR destinationntdomain CONTAINS "pr-tracker.online" OR destinationntdomain CONTAINS "qivvi-3.click" OR destinationntdomain CONTAINS "serienjunkies.us" OR destinationntdomain CONTAINS "vse-blanki.online" OR destinationntdomain CONTAINS "ashgrrwt.click" OR destinationntdomain CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com" OR requesturl CONTAINS "telegromcn.org" OR requesturl CONTAINS "nch-software.info" OR requesturl CONTAINS "vceilinichego.ru" OR requesturl CONTAINS "2022-blanks.site" OR requesturl CONTAINS "finandy.info" OR requesturl CONTAINS "finandy.online" OR requesturl CONTAINS "flnand.online" OR requesturl CONTAINS "kz-smartbank.com" OR requesturl CONTAINS "mareux.online" OR requesturl CONTAINS "mmarx.quest" OR requesturl CONTAINS "okxsat.xyz" OR requesturl CONTAINS "pr-tracker.online" OR requesturl CONTAINS "qivvi-3.click" OR requesturl CONTAINS "serienjunkies.us" OR requesturl CONTAINS "vse-blanki.online" OR requesturl CONTAINS "ashgrrwt.click" OR requesturl CONTAINS "extenision-app.com")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Microsoft Windows" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Network Access Control / NAC" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Virtualization / Containers" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Privileged User" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Access / Identity Management" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Identity Access Management" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Authentication / WiFi" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25","172.67.192.61","89.185.85.144","45.159.188.125","146.70.79.75","104.168.167.25")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Microsoft Windows" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Microsoft Windows" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Microsoft Windows" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Microsoft Windows" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Microsoft Windows" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Microsoft Windows" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / VPN" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / VPN" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Content Management System" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Content Management System" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Network Access Control / NAC" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Network Access Control / NAC" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Network Access Control / NAC" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Network Access Control / NAC" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Virtualization / Containers" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Virtualization / Containers" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Virtualization / Containers" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Virtualization / Containers" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Privileged User" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Privileged User" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Privileged User" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Privileged User" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Privileged User" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Privileged User" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Identity Management" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Identity Management" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Identity Management" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Access / Identity Management" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Identity Management" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Access / Identity Management" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Identity Access Management" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Identity Access Management" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Identity Access Management" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Identity Access Management" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Identity Access Management" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Identity Access Management" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / WiFi" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / WiFi" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Authentication / WiFi" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / WiFi" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0","30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8","https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll","9984af7a440c39b7ac11a68f2da48137","1af84663df057aee4934abe717938b33","f2f85d38b91f582a83388690fdc45284","2782af385665c765807ed887d4bacf36","de283dfb9c88dbb6d455ca4b31c57240","6b2e6d6650116d372ca8c47af08ca8fa","0a4f321c903a7fbc59566918c12aca09","34eea751fcbf4ee8d44977adb4742d93","69a1c37a796dd3ed81785c1995f0973f","b7bf29a9d19af79a0872b8fcf482331b","ea7496d6fb96e3c1e00a1d5f501f6724","f1c21a69ed9f85e12d58ef0f5ac5c9b1","3e181d794e62af5c54d4df5517766af8","70700ae977a0f3ca6a331842d8c103c9","770dd49f7340003d9c66b58cd793dada","f483821b0650653e4da643b212025709","0fc2bd7320c2edfd7985b87fc8cb1f96","223e499f6ba6ebdacf1dcff96008635b","395bef4512a3743299a45d4f9b74a2ee","4f506058ab8bfc5746308a95e34dce85","5133177ac4950cf772d2f729bb0622ec","b7ad9777e3166628abe11dd043ddfb7e","bb8323247baad2d592e7ad1896935dd1","d56d195ebfaea6d97cccddcf3823be24","4724261ef04e2301ecc9ac994b4b346e","020a8ed8a2b123f6c58fed791c6ef636","219070a2502a47a50dd3df5c804074b4","3235e27576dd4e81f1c5986212ec2b78","41a5f1c5d032bcac16c903681674872c","6e426758f184b5a942428731b749b000","94c16b8f9236ab88bb0bca60c4399665","9e5f43b2dc1606e27fa0cfdfb4e363d2","9fe5b99b20bc91995b81eddd917bff50","d41b7138ad25d0401acf3298d0110342","5b7a2e7195bceb8e125758ae27c1e791","d54fa225b07298ec34be872cd4ebf4ae","19c859513f67400f3563e656f27df1c0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("30abf9ca1bb792eb5edd8b033c010979","baee9ba0b94ea1e2b2e566fc8a615554","f31e9238593b34b390ab8faf755e6ede","3bf971fcaa2a3bd321f4e0b6864cb86a","ac00b947ca51d0e71b4c792f1646e4e0","028b2f15560b0f80514cf0a23ae77a43","0a4834d3da05a1d0b2f3a0c13f352a0a","89c34309aca3214c3ce7c72b407570e8")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Microsoft Windows" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Microsoft Windows" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Content Management System" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Network Access Control / NAC" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Network Access Control / NAC" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Virtualization / Containers" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Virtualization / Containers" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Privileged User" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Privileged User" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Identity Management" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Identity Management" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Identity Access Management" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Identity Access Management" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / WiFi" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / WiFi" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://146.70.79.75/1/2.exe","https://146.70.79.75/1/install-win64-11.5.8_en-us.exe","https://146.70.79.75/2.exe","https://nch-software.info/1/2.exe","https://nch-software.info/1/install-win64-11.5.8_en-us.exe","https://panger-top.click/1/2.exe","https://panger-top.click/1/install-win64-11.5.8_en-us.exe","http://nch-software.info/1/2.exe","https://146.70.79.75/","https://146.70.79.75/admin_cp/","https://146.70.79.75/templates/","http://vceilinichego.ru/api/machine/","http://vceilinichego.ru/api/machine/get-urls","http://vceilinichego.ru/api/machine/init","http://vceilinichego.ru/api/machine/set-urls","https://vceilinichego.ru","https://vceilinichego.ru/api/machine","https://vceilinichego.ru/api/machine/","https://vceilinichego.ru/api/machine/check-tasks","https://vceilinichego.ru/api/machine/get-urls","https://vceilinichego.ru/api/machine/init","https://vceilinichego.ru/api/machine/set-tasks","https://vceilinichego.ru/api/machine/set-urls","https://146.70.79.75/templates/light.dotm","https://146.70.79.75/templates/light.pub","https://146.70.79.75/templates/light.xlsm","https://146.70.79.75/templates/x64.xll","https://146.70.79.75/templates/x86.xll")
